Към съдържанието
Търсене

CVE-2026-46250: Linux

7.3

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, без вход и без действие от потребителя.

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: MIPS: Work around LLVM bug when gp is used as global register variable On MIPS, __current_thread_info is defined as global register variable locating in $gp, and is simply assigned with new address during kernel relocation. This however is broken with LLVM, which always restores $gp if it finds $gp is clobbered in any form, including when intentionally through a global register variable. This is against GCC's documentation[1], which requires a callee-saved register used as global register variable not to be restored if it's clobbered. As a result, $gp will continue to point to the unrelocated kernel after the epilog of relocate_kernel(), leading to an early crash in init_idle, [ 0.000000] CPU 0 Unable to handle kernel paging request at virtual address 0000000000000000, epc == ffffffff81afada8, ra == ffffffff81afad90 [ 0.000000] Oops[#1]: [ 0.000000] CPU: 0 UID: 0 PID: 0 Comm: swapper Tainted: G W 6.19.0-rc5-00262-gd3eeb99bbc99-dirty #188 VOLUNTARY [ 0.000000] Tainted: [W]=WARN [ 0.000000] Hardware name: loongson,loongson64v-4core-virtio [ 0.000000] $ 0 : 0000000000000000 0000000000000000 0000000000000001 0000000000000000 [ 0.000000] $ 4 : ffffffff80b80ec0 ffffffff80b53d48 0000000000000000 00000000000f4240 [ 0.000000] $ 8 : 0000000000000100 ffffffff81d82f80 ffffffff81d82f80 0000000000000001 [ 0.000000] $12 : 0000000000000000 ffffffff81776f58 00000000000005da 0000000000000002 [ 0.000000] $16 : ffffffff80b80e40 0000000000000000 ffffffff80b81614 9800000005dfbe80 [ 0.000000] $20 : 00000000540000e0 ffffffff81980000 0000000000000000 ffffffff80f81c80 [ 0.000000] $24 : 0000000000000a26 ffffffff8114fb90 [ 0.000000] $28 : ffffffff80b50000 ffffffff80b53d40 0000000000000000 ffffffff81afad90 [ 0.000000] Hi : 0000000000000000 [ 0.000000] Lo : 0000000000000000 [ 0.000000] epc : ffffffff81afada8 init_idle+0x130/0x270 [ 0

    Засегнати продукти

    • Linux Linux: 279b991b24d2439fbe9d2f093988b9c8aed2603d преди 05bff9b0ae095b2420cfebb4a96759a09334bec6; 279b991b24d2439fbe9d2f093988b9c8aed2603d преди 1fe3b402b1e97a1718df3be0a1d3eee20133e735; 279b991b24d2439fbe9d2f093988b9c8aed2603d преди 4dc65b40fb80c2020efbf139b9a38d30f9a37b92; 279b991b24d2439fbe9d2f093988b9c8aed2603d преди c0155dee51b9f5f48aaf5c71cae005eb0e36521f; 279b991b24d2439fbe9d2f093988b9c8aed2603d преди e3a6498a63394218561065a9a7a597a204f52f6a; 279b991b24d2439fbe9d2f093988b9c8aed2603d преди 561834f6d6f52b8a1791331e94b2aac753491d2a; 279b991b24d2439fbe9d2f093988b9c8aed2603d преди 9bc3b0ae5203aba650297fdf3e1e774125e423f2; 279b991b24d2439fbe9d2f093988b9c8aed2603d преди 30bfc2d6a1132a89a5f1c3b96c59cf3e4d076ea3
    • Linux Linux: 4.7; преди 4.7; 5.10.252 до 5.10.*; 5.15.202 до 5.15.*; 6.1.165 до 6.1.*; 6.6.128 до 6.6.*; 6.12.75 до 6.12.*; 6.18.14 до 6.18.*; 6.19.4 до 6.19.*; от 7.0 нататък

    История

    • 3 юни 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-46250: Linux | freedomonline.bg