Към съдържанието
Търсене

CVE-2026-46331: Linux, грешка в паметта

7.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: има публичен пример за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption tcf_pedit_act() computes the COW range for skb_ensure_writable() once before the key loop using tcfp_off_max_hint, but the hint does not account for the runtime header offset added by typed keys. This can leave part of the write region un-COW'd. Fix by moving skb_ensure_writable() inside the per-key loop where the actual write offset is known, and add overflow checking on the offset arithmetic. For negative offsets (e.g. Ethernet header edits at ingress), use skb_cow() to COW the headroom instead. Guard offset_valid() against INT_MIN, where negation is undefined.

Засегнати продукти

  • Linux Linux: abe35bf3be51482593076d516a680d79e5fbc8e1 преди 544d857b42a1734b923040e13aa61a6fd4746cf2; b773640d5bb9e2acfd91e2695717af04d47aa116 преди d5d01d35a5a7d36f7cb679b67d9cbdd5205672dc; 8b796475fd7882663a870456466a4fb315cc1bd6 преди a071e057518decc5e3bec89855758f5f8786f2c5; 8b796475fd7882663a870456466a4fb315cc1bd6 преди b685d6ef6f07a3b5ce814565a25f39f2157538a5; 8b796475fd7882663a870456466a4fb315cc1bd6 преди 2bec122b9fb91507a758ab5e3e5c4fbe7cb3f61b; 8b796475fd7882663a870456466a4fb315cc1bd6 преди b198ed4e52580a7238c7c7082f03906f8b310313; 8b796475fd7882663a870456466a4fb315cc1bd6 преди 3dee9d0c198faeb95d052c1b94c2958751a28512; 8b796475fd7882663a870456466a4fb315cc1bd6 преди 899ee91156e57784090c5565e4f31bd7dbffbc5a; d0c38a914b0c4c21d553da801003d36979016726; 2ec2dd7d51a9320151f275ddbb2b53260fb32ca1; c19cc520b3d69904e9518d401ad0df7f4702aca0; 5.10.117 преди 5.10.260; 5.15.41 преди 5.15.211; 4.19.244 преди 4.20; 5.4.195 преди 5.5; 5.17.9 преди 5.18
  • Linux Linux: 5.18; преди 5.18; 5.10.260 до 5.10.*; 5.15.211 до 5.15.*; 6.1.177 до 6.1.*; 6.6.144 до 6.6.*; 6.12.94 до 6.12.*; 6.18.36 до 6.18.*; 7.0.13 до 7.0.*; 7.1 до *
  • Red Hat NVIDIA for RHEL 10: 0:6.12.0-212.11.el10nv преди *; 0:6.12.0-231.13.el10nv преди *
  • Red Hat Red Hat Enterprise Linux 10: 0:6.12.0-211.26.1.el10_2 преди *
  • Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: 0:6.12.0-55.82.1.el10_0 преди *
  • Red Hat Red Hat Enterprise Linux 8: 0:4.18.0-553.136.1.rt7.477.el8_10 преди *
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: 0:4.18.0-305.195.1.el8_4 преди *
  • Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: 0:4.18.0-305.195.1.el8_4 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: 0:4.18.0-372.197.1.el8_6 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: 0:4.18.0-372.197.1.el8_6 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 0:4.18.0-477.148.1.el8_8 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 0:4.18.0-477.148.1.el8_8 преди *
  • Red Hat Red Hat Enterprise Linux 9: 0:5.14.0-687.17.1.el9_8 преди *
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 0:5.14.0-284.177.1.el9_2 преди *
  • Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: 0:5.14.0-427.134.1.el9_4 преди *
  • Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 0:5.14.0-570.123.1.el9_6 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.12: 412.86.202606251120-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.13: 413.92.202607141229-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.14: 414.92.202606231112-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.15: 415.92.202606200237-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.16: 416.94.202606230218-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.17: 417.94.202606250942-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.18: 418.94.202606221349-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.19: 4.19.9.6.202606241344-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.20: 4.20.9.6.202606241928-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.21: 4.21.9.6.202606241859-0 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.22: 4.22.9.8.202606230855-0 преди *
  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat OpenShift Container Platform 4
  • Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem: преди *

Вид слабост

История

  • 16 юни 2026 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2026-46331: Linux, грешка в паметта | freedomonline.bg