CVE-2026-46155: Linux, грешка в паметта

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2_compound_op() If a server sends a truncated response but a large OutputBufferLength, and terminates the EA list early, check_wsl_eas() returns success without validating that the entire OutputBufferLength fits within iov_len. Then smb2_compound_op() does: memcpy(idata->wsl.eas, data[0], size[0]); Where size[0] is OutputBufferLength. If iov_len is smaller than size[0], memcpy can read beyond the end of the rsp_iov allocation and leak adjacent kernel heap memory.

Засегнати продукти

• Linux Linux: 7449d736bbbd160c76b01b8fcdf72f58a8757d4b преди dffb44b2e06a2908e249f0f93156fc987eee1d1c; ea41367b2a602f602ea6594fc4a310520dcc64f4 преди 9b3af35645ff9cd334edc130249f9a2fb2bea25f; ea41367b2a602f602ea6594fc4a310520dcc64f4 преди 512d33bc8ea4ea5c19728ee118715f4b1f4d1926; ea41367b2a602f602ea6594fc4a310520dcc64f4 преди a16f70a71be4b5a4eccf39a9bf09b47285f4cb7c; ea41367b2a602f602ea6594fc4a310520dcc64f4 преди 8d09328dfda089675e4c049f3f256064a1d1996b; 6.6.32 преди 6.6.140
• Linux Linux: 6.9; преди 6.9; 6.6.140 до 6.6.*; 6.12.88 до 6.12.*; 6.18.30 до 6.18.*; 7.0.7 до 7.0.*; от 7.1 нататък

Вид слабост

• CWE-125 Четене извън границите на буфера

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-46155
• https://nvd.nist.gov/vuln/detail/CVE-2026-46155
• https://git.kernel.org/stable/c/dffb44b2e06a2908e249f0f93156fc987eee1d1c
• https://git.kernel.org/stable/c/9b3af35645ff9cd334edc130249f9a2fb2bea25f
• https://git.kernel.org/stable/c/512d33bc8ea4ea5c19728ee118715f4b1f4d1926
• https://git.kernel.org/stable/c/a16f70a71be4b5a4eccf39a9bf09b47285f4cb7c
• https://git.kernel.org/stable/c/8d09328dfda089675e4c049f3f256064a1d1996b