Към съдържанието
Търсене

CVE-2026-46243: Linux, невалидиран вход

7.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: има публичен пример за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.

Засегнати продукти

  • Linux Linux: f1d662a7d5e5322e583aad6b3cfec03d8f27b435 преди 7713bd320ed4fc3d08a227cd8e41242219a16981; f1d662a7d5e5322e583aad6b3cfec03d8f27b435 преди 9544559e59438a4b609b2fdfa0763d8360572824; f1d662a7d5e5322e583aad6b3cfec03d8f27b435 преди cf20038657d6d4974349556a34e08fe0490bebbc; f1d662a7d5e5322e583aad6b3cfec03d8f27b435 преди 2035acfb17221729b1b8ac335e941868a04ca079; f1d662a7d5e5322e583aad6b3cfec03d8f27b435 преди a3bbda6502a9398b816fa2e71c9a3f955f58013d; f1d662a7d5e5322e583aad6b3cfec03d8f27b435 преди 91f89c1d83e80417629791fcef6af8140d7d01c8; f1d662a7d5e5322e583aad6b3cfec03d8f27b435 преди 0aece6685fc80a8de492688ca2315fb86ec379c7; f1d662a7d5e5322e583aad6b3cfec03d8f27b435 преди 3da1fdf4efbc490041eb4f836bf596201203f8f2
  • Linux Linux: 2.6.24; преди 2.6.24; 5.10.258 до 5.10.*; 5.15.209 до 5.15.*; 6.1.175 до 6.1.*; 6.6.142 до 6.6.*; 6.12.92 до 6.12.*; 6.18.34 до 6.18.*; 7.0.11 до 7.0.*; 7.1 до *
  • Red Hat NVIDIA for RHEL 10: 0:6.12.0-212.9.el10nv преди *; 0:6.12.0-231.12.el10nv преди *
  • Red Hat Red Hat Enterprise Linux 10: 0:6.12.0-211.20.1.el10_2 преди *
  • Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: 0:6.12.0-55.79.1.el10_0 преди *
  • Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION: 0:2.6.32-754.61.1.el6 преди *
  • Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: 0:3.10.0-1160.155.1.rt56.1307.el7 преди *
  • Red Hat Red Hat Enterprise Linux 8: 0:4.18.0-553.129.1.rt7.470.el8_10 преди *
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: 0:4.18.0-305.194.1.el8_4 преди *
  • Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: 0:4.18.0-305.194.1.el8_4 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: 0:4.18.0-372.196.1.el8_6 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: 0:4.18.0-372.196.1.el8_6 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 0:4.18.0-477.147.1.el8_8 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 0:4.18.0-477.147.1.el8_8 преди *
  • Red Hat Red Hat Enterprise Linux 9: 0:5.14.0-687.13.1.el9_8 преди *
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 0:5.14.0-284.176.1.el9_2 преди *
  • Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: 0:5.14.0-427.132.1.el9_4 преди *
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 0:5.14.0-570.123.1.el9_6 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.12: 412.86.202606251120-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.13: 413.92.202607141229-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.14: 414.92.202606231112-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.15: 415.92.202606200237-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.16: 416.94.202607021016-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.17: 417.94.202607240132-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.18: 418.94.202606250458-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.19: 4.19.9.6.202606302000-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.20: 4.20.9.6.202607010620-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.21: 4.21.9.6.202607011303-0 преди *
  • Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem: преди *

Вид слабост

История

  • 1 юни 2026 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2026-46243: Linux, невалидиран вход | freedomonline.bg