Към съдържанието
Търсене

CVE-2026-53016: Linux, грешка в паметта

7.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccp_aes_complete() restores AES_BLOCK_SIZE bytes into the caller's IV buffer while RFC3686 skciphers expose an 8-byte IV, so the restore overruns the provided buffer. Use crypto_skcipher_ivsize() to copy only the algorithm's IV length.

Засегнати продукти

  • Linux Linux: 2b789435d7f36ed918d92db647f3a2f3fec9bb1f преди 939061b2d0f7f15114e34b4ce878ef50ff4089c3; 2b789435d7f36ed918d92db647f3a2f3fec9bb1f преди 798d409a8949f3f495f238549b86de2886b129bd; 2b789435d7f36ed918d92db647f3a2f3fec9bb1f преди dfb2cf434829819268fe50f41542aad318ad62b2; 2b789435d7f36ed918d92db647f3a2f3fec9bb1f преди eecee15e263ccb8cd77170a56ab6c969cb54dd6a; 2b789435d7f36ed918d92db647f3a2f3fec9bb1f преди bb01d8f1f385bc9034ca114d3508c7fdea24fc9a; 2b789435d7f36ed918d92db647f3a2f3fec9bb1f преди df9784bb5b637ac80f4a2768a58ca9a50bef28a9; 2b789435d7f36ed918d92db647f3a2f3fec9bb1f преди 227c1e1d9e2aa4cfc65ba446d5690da1f546cda4; 2b789435d7f36ed918d92db647f3a2f3fec9bb1f преди a7a1f3cdd64d8a165d9b8c9e9ad7fb46ac19dfc4
  • Linux Linux: 3.14; преди 3.14; 5.10.258 до 5.10.*; 5.15.209 до 5.15.*; 6.1.175 до 6.1.*; 6.6.141 до 6.6.*; 6.12.91 до 6.12.*; 6.18.33 до 6.18.*; 7.0.10 до 7.0.*; 7.1 до *
  • Red Hat Red Hat Enterprise Linux 9
  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • Red Hat Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • Red Hat Red Hat Enterprise Linux AppStream E4S (v.9.4)
  • Red Hat Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • Red Hat Red Hat Enterprise Linux AppStream (v. 9)
  • Red Hat Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • Red Hat Red Hat Enterprise Linux BaseOS (v. 10)
  • Red Hat Red Hat Enterprise Linux BaseOS (v. 8)
  • Red Hat Red Hat Enterprise Linux BaseOS AUS (v.8.4)
  • Red Hat Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)
  • Red Hat Red Hat Enterprise Linux BaseOS AUS (v.8.6)
  • Red Hat Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)
  • Red Hat Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • Red Hat Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • Red Hat Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • Red Hat Red Hat Enterprise Linux BaseOS E4S (v.9.4)
  • Red Hat Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • Red Hat Red Hat Enterprise Linux BaseOS (v. 9)
  • Red Hat Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)
  • Red Hat Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • Red Hat Red Hat Enterprise Linux CRB (v. 8)
  • Red Hat Red Hat CodeReady Linux Builder EUS (v.9.6)
  • Red Hat Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)
  • Red Hat Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)
  • Red Hat Red Hat Enterprise Linux Real Time for NFV (v. 10)
  • Red Hat Red Hat Enterprise Linux NFV (v. 8)
  • Red Hat Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)
  • Red Hat Red Hat Enterprise Linux Real Time for NFV E4S (v.9.4)
  • Red Hat Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)
  • Red Hat Red Hat Enterprise Linux Real Time for NFV (v. 9)
  • Red Hat Red Hat Enterprise Linux Real Time EUS (v. 10.0)
  • Red Hat Red Hat Enterprise Linux Real Time (v. 10)
  • Red Hat Red Hat Enterprise Linux RT (v. 8)
  • Red Hat Red Hat Enterprise Linux Real Time E4S (v.9.2)
  • Red Hat Red Hat Enterprise Linux Real Time E4S (v.9.4)
  • Red Hat Red Hat Enterprise Linux Real Time EUS (v.9.6)
  • Red Hat Red Hat Enterprise Linux Real Time (v. 9)

Вид слабост

История

  • 24 юни 2026 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2026-53016: Linux, грешка в паметта | freedomonline.bg