Към съдържанието
Търсене

CVE-2026-100071: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: net: hsr: free learned nodes on device setup failure hsr_dev_finalize() can fail after a lower-device RX handler has already been registered (slave A is added before the failable slave B and interlink adds). RX handlers run in softirq regardless of the master's state, so frames received in that window can learn dynamic nodes into node_db, and the error unwind never releases them. Free both owned dynamic databases in the unwind, mirroring hsr_dellink(). proxy_node_db is provably empty on every current error exit (only interlink RX feeds it, and the interlink add is the last failable step) and is freed for symmetry. The order is safe: hsr_del_port() unregisters each RX handler with synchronize_net() before hsr_del_nodes() runs, which removes remaining entries with list_del_rcu() and defers their release with call_rcu() for readers already under RCU.

    Засегнати продукти

    • Linux Linux: 81ba6afd6e6443d2bf4bf40f16df1f1f91c603f8 преди e691eee886871b933d772ffc76d66c80b4c0a25e; 81ba6afd6e6443d2bf4bf40f16df1f1f91c603f8 преди 0a340ffd96943a49a78e367efac9517ca767d99b; 81ba6afd6e6443d2bf4bf40f16df1f1f91c603f8 преди f7289e3492f2694dccd3d79287e0e31879b58650; 81ba6afd6e6443d2bf4bf40f16df1f1f91c603f8 преди 65702339b3e9fd792f65d4b740928798194d86ce; 81ba6afd6e6443d2bf4bf40f16df1f1f91c603f8 преди 49b01f2939abc676a6f9a118f07a10110ee5f683; 81ba6afd6e6443d2bf4bf40f16df1f1f91c603f8 преди 7f16289b91eb316f170a6bd22d32e6c632f6a5b6
    • Linux Linux: 3.17; преди 3.17; 6.1.188 до 6.1.*; 6.6.157 до 6.6.*; 6.12.110 до 6.12.*; 6.18.52 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък

    История

    • 25 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-100071: Linux | freedomonline.bg