Към съдържанието
Търсене

CVE-2026-46090: Linux, грешка в паметта

7.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: ALSA: aloop: Fix peer runtime UAF during format-change stop loopback_check_format() may stop the capture side when playback starts with parameters that no longer match a running capture stream. Commit 826af7fa62e3 ("ALSA: aloop: Fix racy access at PCM trigger") moved the peer lookup under cable->lock, but the actual snd_pcm_stop() still runs after dropping that lock. A concurrent close can clear the capture entry from cable->streams[] and detach or free its runtime while the playback trigger path still holds a stale peer substream pointer. Keep a per-cable count of in-flight peer stops before dropping cable->lock, and make free_cable() wait for those stops before detaching the runtime. This preserves the existing behavior while making the peer runtime lifetime explicit.

Засегнати продукти

  • Linux Linux: 597603d615d2b19a9e451d8cfac24372856a522d преди 83bd62fa9620ac98d5d694bde14c50f98c8e7189; 597603d615d2b19a9e451d8cfac24372856a522d преди 345c24b2bcf0923dfae1ab41497351c68214ff76; 597603d615d2b19a9e451d8cfac24372856a522d преди 3727a3541788412c393eec236ad228d72efe19c7; 597603d615d2b19a9e451d8cfac24372856a522d преди d258cdce50ff3e02392917258e81a0ce9555c327; 597603d615d2b19a9e451d8cfac24372856a522d преди 03f52a9c170431e8f10e156b9dc0dae80b3e9198; 597603d615d2b19a9e451d8cfac24372856a522d преди bdd9503c3d222d2735b56c7a8b4422ccf3de6e5c; 597603d615d2b19a9e451d8cfac24372856a522d преди 5d45e34bf001344e2966dabca1897561bbc9e913; 597603d615d2b19a9e451d8cfac24372856a522d преди e5c33cdc6f402eab8abd36ecf436b22c9d3a8aff
  • Linux Linux: 2.6.37; преди 2.6.37; 5.10.259 до 5.10.*; 5.15.210 до 5.15.*; 6.1.188 до 6.1.*; 6.6.157 до 6.6.*; 6.12.88 до 6.12.*; 6.18.27 до 6.18.*; 7.0.4 до 7.0.*; 7.1 до *
  • Red Hat Red Hat Enterprise Linux 10: 0:6.12.0-211.29.1.el10_2 преди *
  • Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: 0:6.12.0-55.84.1.el10_0 преди *
  • Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: 0:3.10.0-1160.155.1.rt56.1307.el7 преди *
  • Red Hat Red Hat Enterprise Linux 8: 0:4.18.0-553.136.1.rt7.477.el8_10 преди *
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: 0:4.18.0-305.197.1.el8_4 преди *
  • Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: 0:4.18.0-305.197.1.el8_4 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: 0:4.18.0-372.198.1.el8_6 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: 0:4.18.0-372.198.1.el8_6 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 0:4.18.0-477.150.1.el8_8 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 0:4.18.0-477.150.1.el8_8 преди *
  • Red Hat Red Hat Enterprise Linux 9: 0:5.14.0-687.19.1.el9_8 преди *
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 0:5.14.0-284.178.1.el9_2 преди *
  • Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: 0:5.14.0-427.135.1.el9_4 преди *
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 0:5.14.0-570.125.1.el9_6 преди *
  • Red Hat Red Hat Enterprise Linux 6

Вид слабост

История

  • 27 май 2026 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2026-46090: Linux, грешка в паметта | freedomonline.bg