Към съдържанието

CVE-2026-31418: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: drop logically empty buckets in mtype_del mtype_del() counts empty slots below n->pos in k, but it only drops the bucket when both n->pos and k are zero. This misses buckets whose live entries have all been removed while n->pos still points past deleted slots. Treat a bucket as empty when all positions below n->pos are unused and release it directly instead of shrinking it further.

    Засегнати продукти

    • Linux Linux: 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 преди c098ff857e7ca923539164af5b3c2fe3e8f8afaf; 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 преди 58f3a14826d4e6b0d5421f1a64be280b48601ea2; 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 преди ad92ee87462f9a3061361d392e9dbfe2e5c1c9fb; 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 преди 6cea34d7ec6829b62f521a37a287f670144a2233; 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 преди b7eef00f08b92b0b9efe8ae0df6d0005e6199323; 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 преди 68ca0eea0af02bed36c5e2c13e9fa1647c31a7d4; 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 преди ceacaa76f221a6577aba945bb8873c2e640aeba4; 8af1c6fbd9239877998c7f5a591cb2c88d41fb66 преди 9862ef9ab0a116c6dca98842aab7de13a252ae02; 6c717726f341fd8f39a3ec2dcf5d98d9d28a2769; d2997d64dfa65082236bca1efd596b6c935daf5e; 5.4.24 преди 5.5; 5.5.8 преди 5.6
    • Linux Linux: 5.6; преди 5.6; 5.10.253 до 5.10.*; 5.15.203 до 5.15.*; 6.1.168 до 6.1.*; 6.6.134 до 6.6.*; 6.12.81 до 6.12.*; 6.18.22 до 6.18.*; 6.19.12 до 6.19.*; от 7.0 нататък
    • Siemens: още 3 продукта, добавени от Siemens

      SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

    История

    • 13 април 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-31418: Linux | freedomonline.bg