Към съдържанието
Търсене

CVE-2026-63913: Linux, невалидиран вход

8.2

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check An unintended behavior in the TCP conntrack state machine allows a connection to be forced into the CLOSE state using an RST packet with an invalid sequence number. Specifically, after a SYN packet is observed, an RST with an invalid SEQ can transition the conntrack entry to TCP_CONNTRACK_CLOSE, regardless of whether the RST corresponds to the expected reply direction. The relevant code path assumes the RST is a response to an outgoing SYN, but does not validate packet direction or ensure that a matching SYN was actually sent in the opposite direction. As a result, a crafted packet sequence consisting of a SYN followed by an invalid-sequence RST can prematurely terminate an active NAT entry. This makes connection teardown easier than intended. So, tighten the state transition logic to ensure that RST-triggered CLOSE transitions only occur when the RST is a valid response to a previously observed SYN in the correct direction.

Засегнати продукти

  • Linux Linux: 9fb9cbb1082d6b31fb45aa1a14432449a0df6cf1 преди 2006979a15af5404bf932a325357683c0bac1656; 9fb9cbb1082d6b31fb45aa1a14432449a0df6cf1 преди 6476c17d536dbd321c073242e762ddb2713a1238; 9fb9cbb1082d6b31fb45aa1a14432449a0df6cf1 преди f5547bebc416d56f56fb5b86dc20aabfa42165a0; 9fb9cbb1082d6b31fb45aa1a14432449a0df6cf1 преди 2bb6d82b586ea5a4cb73bbdd6b7432e96096bc77; 9fb9cbb1082d6b31fb45aa1a14432449a0df6cf1 преди f206def4e86d810f927ba1d8e322ea72b29bce58; 9fb9cbb1082d6b31fb45aa1a14432449a0df6cf1 преди b98ab51c45c5608a1c19ce7fd17a3032469bb83f; 9fb9cbb1082d6b31fb45aa1a14432449a0df6cf1 преди d67c6adee8d1b65330d0174c4c367faba14e80a8; 9fb9cbb1082d6b31fb45aa1a14432449a0df6cf1 преди bed6e04be8e6b9133d8b16d5a42d0e0ce674fa9a
  • Linux Linux: 2.6.15; преди 2.6.15; 5.10.259 до 5.10.*; 5.15.210 до 5.15.*; 6.1.176 до 6.1.*; 6.6.143 до 6.6.*; 6.12.93 до 6.12.*; 6.18.35 до 6.18.*; 7.0.12 до 7.0.*; от 7.1 нататък

Вид слабост

История

  • 19 юли 2026 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2026-63913: Linux, невалидиран вход | freedomonline.bg