Към съдържанието
Търсене

CVE-2026-31422: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: fix NULL pointer dereference on shared blocks flow_change() calls tcf_block_q() and dereferences q->handle to derive a default baseclass. Shared blocks leave block->q NULL, causing a NULL deref when a flow filter without a fully qualified baseclass is created on a shared block. Check tcf_block_shared() before accessing block->q and return -EINVAL for shared blocks. This avoids the null-deref shown below: ======================================================================= KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] RIP: 0010:flow_change (net/sched/cls_flow.c:508) Call Trace: tc_new_tfilter (net/sched/cls_api.c:2432) rtnetlink_rcv_msg (net/core/rtnetlink.c:6980) [...] =======================================================================

    Засегнати продукти

    • Linux Linux: 1abf272022cf1d18469405f47b4ec49c6a3125db преди 57f94ac7e953eece5ed4819605a18f3cdfc63dcc; 1abf272022cf1d18469405f47b4ec49c6a3125db преди 942813276edeb1741fa5b0a73471beb4e495fa08; 1abf272022cf1d18469405f47b4ec49c6a3125db преди cc707a4fd4c3b6ab2722e06bc359aa010e13d408; 1abf272022cf1d18469405f47b4ec49c6a3125db преди 4a09f72007201c9f667dc47f64517ec23eea65e5; 1abf272022cf1d18469405f47b4ec49c6a3125db преди 9bf5fc36a43f7b8b5507c96e74fb81f1e8b4957e; 1abf272022cf1d18469405f47b4ec49c6a3125db преди a208c3e1232997e9317887294c20008dfcb75449; 1abf272022cf1d18469405f47b4ec49c6a3125db преди 415ea0c973c754b9f375225807810eb9045f4293; 1abf272022cf1d18469405f47b4ec49c6a3125db преди 1a280dd4bd1d616a01d6ffe0de284c907b555504
    • Linux Linux: 4.15; преди 4.15; 5.10.253 до 5.10.*; 5.15.203 до 5.15.*; 6.1.168 до 6.1.*; 6.6.134 до 6.6.*; 6.12.81 до 6.12.*; 6.18.22 до 6.18.*; 6.19.12 до 6.19.*; 7.0 до *
    • Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: V3.1.6 преди *
    • Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP: V3.1.6 преди *
    • Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP: V3.1.6 преди *

    История

    • 13 април 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-31422: Linux | freedomonline.bg