Към съдържанието
Търсене

CVE-2026-43085: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator When batching multiple NFLOG messages (inst->qlen > 1), __nfulnl_send() appends an NLMSG_DONE terminator with sizeof(struct nfgenmsg) payload via nlmsg_put(), but never initializes the nfgenmsg bytes. The nlmsg_put() helper only zeroes alignment padding after the payload, not the payload itself, so four bytes of stale kernel heap data are leaked to userspace in the NLMSG_DONE message body. Use nfnl_msg_put() to build the NLMSG_DONE terminator, which initializes the nfgenmsg payload via nfnl_fill_hdr(), consistent with how __build_packet_message() already constructs NFULNL_MSG_PACKET headers.

    Засегнати продукти

    • Linux Linux: 29c5d4afba51c71cfeadd3f74f3c42e064483fb0 преди 296f18e1c3a87c915a92ed27832d5040a22d1072; 29c5d4afba51c71cfeadd3f74f3c42e064483fb0 преди 9e2182865de781c41ab16b7985e9d26dcefea867; 29c5d4afba51c71cfeadd3f74f3c42e064483fb0 преди 57cc509d82b46150a11dcecc8b25eaa177eda34d; 29c5d4afba51c71cfeadd3f74f3c42e064483fb0 преди 368c22aea490f6f50df831b4f9e3623787686c5b; 29c5d4afba51c71cfeadd3f74f3c42e064483fb0 преди d1399632ba255d2e02c757af5d9f5d9279ce168c; 29c5d4afba51c71cfeadd3f74f3c42e064483fb0 преди d552bcfca323d175664d7444989b04f55666978a; 29c5d4afba51c71cfeadd3f74f3c42e064483fb0 преди 15d209bccf9273b4a8b4e579ba0e92d065b6ec8c; 29c5d4afba51c71cfeadd3f74f3c42e064483fb0 преди 1f3083aec8836213da441270cdb1ab612dd82cf4
    • Linux Linux: 2.6.23; преди 2.6.23; 5.10.258 до 5.10.*; 5.15.209 до 5.15.*; 6.1.175 до 6.1.*; 6.6.136 до 6.6.*; 6.12.83 до 6.12.*; 6.18.24 до 6.18.*; 6.19.14 до 6.19.*; 7.0 до *
    • Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: V3.1.6 преди *
    • Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP: V3.1.6 преди *
    • Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem: преди *
    • Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP: V3.1.6 преди *

    История

    • 6 май 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-43085: Linux | freedomonline.bg