CVE-2026-45884: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid per-cpu hold underflow in aa_get_buffer When aa_get_buffer() pulls from the per-cpu list it unconditionally decrements cache->hold. If hold reaches 0 while count is still non-zero, the unsigned decrement wraps to UINT_MAX. This keeps hold non-zero for a very long time, so aa_put_buffer() never returns buffers to the global list, which can starve other CPUs and force repeated kmalloc(aa_g_path_max) allocations. Guard the decrement so hold never underflows.

Засегнати продукти

• Linux Linux: ea9bae12d02819556db63348db8bd8441eb316f2 преди 202824a1f89a9786c20a3d646a7c88d223abb1b2; ea9bae12d02819556db63348db8bd8441eb316f2 преди 80c334acc6d0bee8605a358a33e69b4aea1ffb92; ea9bae12d02819556db63348db8bd8441eb316f2 преди 4bcddd0f6b2e52b4c7b520e4d36a115caf5b7169; ea9bae12d02819556db63348db8bd8441eb316f2 преди 640cf2f09575c9dc344b3f7be2498d31e3923ead
• Linux Linux: 6.7; преди 6.7; 6.12.75 до 6.12.*; 6.18.14 до 6.18.*; 6.19.4 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-45884
• https://nvd.nist.gov/vuln/detail/CVE-2026-45884
• https://git.kernel.org/stable/c/202824a1f89a9786c20a3d646a7c88d223abb1b2
• https://git.kernel.org/stable/c/80c334acc6d0bee8605a358a33e69b4aea1ffb92
• https://git.kernel.org/stable/c/4bcddd0f6b2e52b4c7b520e4d36a115caf5b7169
• https://git.kernel.org/stable/c/640cf2f09575c9dc344b3f7be2498d31e3923ead