Към съдържанието
Търсене

CVE-2026-45917: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: ipvs: do not keep dest_dst if dev is going down There is race between the netdev notifier ip_vs_dst_event() and the code that caches dst with dev that is going down. As the FIB can be notified for the closed device after our handler finishes, it is possible valid route to be returned and cached resuling in a leaked dev reference until the dest is not removed. To prevent new dest_dst to be attached to dest just after the handler dropped the old one, add a netif_running() check to make sure the notifier handler is not currently running for device that is closing.

    Засегнати продукти

    • Linux Linux: 7a4f0761fce32ff4918a7c23b08db564ad33092d преди 0b60fb44247eab81e7a9490c38ca62c7120eec75; 7a4f0761fce32ff4918a7c23b08db564ad33092d преди 11d35b11013442576f35fd9e8a8fc16155101906; 7a4f0761fce32ff4918a7c23b08db564ad33092d преди 64af43033503458c46023e56d6ae7bb0f824b55f; 7a4f0761fce32ff4918a7c23b08db564ad33092d преди bae53b3baf2ff2f45f9205c438818fc055601a54; 7a4f0761fce32ff4918a7c23b08db564ad33092d преди 024eb0bd19f507e6e7f0c7a7e5506d66b5dc1d3e; 7a4f0761fce32ff4918a7c23b08db564ad33092d преди 8fde939b0206afc1d5846217a01a16b9bc8c7896
    • Linux Linux: 2.6.39; преди 2.6.39; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.75 до 6.12.*; 6.18.14 до 6.18.*; 6.19.4 до 6.19.*; от 7.0 нататък

    История

    • 27 май 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници