Към съдържанието
Търсене

CVE-2026-31681: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_multiport: validate range encoding in checkentry ports_match_v1() treats any non-zero pflags entry as the start of a port range and unconditionally consumes the next ports[] element as the range end. The checkentry path currently validates protocol, flags and count, but it does not validate the range encoding itself. As a result, malformed rules can mark the last slot as a range start or place two range starts back to back, leaving ports_match_v1() to step past the last valid ports[] element while interpreting the rule. Reject malformed multiport v1 rules in checkentry by validating that each range start has a following element and that the following element is not itself marked as another range start.

    Засегнати продукти

    • Linux Linux: a89ecb6a2ef732d04058d87801e2b6bd7e5c7089 преди 8c5bf8f5b478f569191c4a7982de7cd5f5f73c1a; a89ecb6a2ef732d04058d87801e2b6bd7e5c7089 преди c9749f6232c845e31c21d4cc72200211df15d8a2; a89ecb6a2ef732d04058d87801e2b6bd7e5c7089 преди b67d638cbee9975c765feb45c126e96ed11ec802; a89ecb6a2ef732d04058d87801e2b6bd7e5c7089 преди 36bf0d98e180a7c384c8d8a59b0d2d4b80e5eb16; a89ecb6a2ef732d04058d87801e2b6bd7e5c7089 преди aec14808271f2bf2b656de6ff12dfe73c5fd3b67; a89ecb6a2ef732d04058d87801e2b6bd7e5c7089 преди 8368ce8eb01f0b91111d814703696e780d0ef12f; a89ecb6a2ef732d04058d87801e2b6bd7e5c7089 преди 1e4baa853f1cc4227e04f52d6860524707cfb294; a89ecb6a2ef732d04058d87801e2b6bd7e5c7089 преди ff64c5bfef12461df8450e0f50bb693b5269c720
    • Linux Linux: 2.6.17; преди 2.6.17; 5.10.258 до 5.10.*; 5.15.209 до 5.15.*; 6.1.175 до 6.1.*; 6.6.136 до 6.6.*; 6.12.83 до 6.12.*; 6.18.24 до 6.18.*; 6.19.14 до 6.19.*; 7.0 до *
    • Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: V3.1.6 преди *
    • Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP: V3.1.6 преди *
    • Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem: преди *
    • Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP: V3.1.6 преди *

    История

    • 25 април 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-31681: Linux | freedomonline.bg