Към съдържанието
Търсене

CVE-2026-43427: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in read code path Quoting the bug report: Due to compiler optimization or CPU out-of-order execution, the desc->length update can be reordered before the memmove. If this happens, wdm_read() can see the new length and call copy_to_user() on uninitialized memory. This also violates LKMM data race rules [1]. Fix it by using WRITE_ONCE and memory barriers.

    Засегнати продукти

    • Linux Linux: afba937e540c902c989cd516fd97ea0c8499bb27 преди 638328ca9c17ae6511ad62198c57bae32ffa3c91; afba937e540c902c989cd516fd97ea0c8499bb27 преди 170e8daca24da6edb4be82ab01abf44e87af387b; afba937e540c902c989cd516fd97ea0c8499bb27 преди c8fa96ed021923dae147bcd9f9205b8df7b82360; afba937e540c902c989cd516fd97ea0c8499bb27 преди 4ee3062bf2c9a722afef429826e8607eaf3fc6a0; afba937e540c902c989cd516fd97ea0c8499bb27 преди 276aef0fd2b92f41b920ac891c72cadeee957934; afba937e540c902c989cd516fd97ea0c8499bb27 преди 67ed312124bb1b61858778ac0b985b48961c862a; afba937e540c902c989cd516fd97ea0c8499bb27 преди e3c874b05901dc519054b5107d16620e6d2b5fea; afba937e540c902c989cd516fd97ea0c8499bb27 преди 8df672bfe3ec2268c2636584202755898e547173
    • Linux Linux: 2.6.26; преди 2.6.26; 5.10.253 до 5.10.*; 5.15.203 до 5.15.*; 6.1.167 до 6.1.*; 6.6.130 до 6.6.*; 6.12.78 до 6.12.*; 6.18.19 до 6.18.*; 6.19.9 до 6.19.*; 7.0 до *

    История

    • 8 май 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-43427: Linux | freedomonline.bg