CVE-2026-23384: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ionic_create_cq() struct ionic_cq_resp resp { __u32 cqid[2]; // offset 0 - PARTIALLY SET (see below) __u8 udma_mask; // offset 8 - SET (resp.udma_mask = vcq->udma_mask) __u8 rsvd[7]; // offset 9 - NEVER SET <- LEAK }; rsvd[7]: 7 bytes of stack memory leaked unconditionally. cqid[2]: The loop at line 1256 iterates over udma_idx but skips indices where !(vcq->udma_mask & BIT(udma_idx)). The array has 2 entries but udma_count could be 1, meaning cqid[1] might never be written via ionic_create_cq_common(). If udma_mask only has bit 0 set, cqid[1] (4 bytes) is also leaked. So potentially 11 bytes leaked.

Засегнати продукти

• Linux Linux: e8521822c733c6deab0f339843cd37cd62c12795 преди a6f3e0fa8e862f220c26c2f27e5ddc42eb82ad3e; e8521822c733c6deab0f339843cd37cd62c12795 преди 547d0b07ad73915b323bc21f85c5d3252bebbbcf; e8521822c733c6deab0f339843cd37cd62c12795 преди faa72102b178c7ae6c6afea23879e7c84fc59b4e
• Linux Linux: 6.18; преди 6.18; 6.18.17 до 6.18.*; 6.19.7 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-23384
• https://nvd.nist.gov/vuln/detail/CVE-2026-23384
• https://git.kernel.org/stable/c/a6f3e0fa8e862f220c26c2f27e5ddc42eb82ad3e
• https://git.kernel.org/stable/c/547d0b07ad73915b323bc21f85c5d3252bebbbcf
• https://git.kernel.org/stable/c/faa72102b178c7ae6c6afea23879e7c84fc59b4e