CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се локално, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data When bpf_msg_push_data() inserts data in the middle of a scatterlist entry, it splits the original entry into a left fragment and a right fragment. The right fragment offset is page-local, but the code advances it with `start`, which is the message-global insertion point. For inserts into a non-first SG entry, this over-advances the offset and leaves the split layout inconsistent. Advance the right fragment offset by the fragment-local delta, `start - offset`, which matches the length removed from the front of the original entry.
Засегнати продукти
- Linux Linux: 6fff607e2f14bd7c63c06c464a6f93b8efbabe28 преди f14609d8146707452e0822f3c8154674ce677251; 6fff607e2f14bd7c63c06c464a6f93b8efbabe28 преди d81b323af2dcee47573907ccb89c0df9b45cb2e2; 6fff607e2f14bd7c63c06c464a6f93b8efbabe28 преди aeb95146848d12206e1b2cfacd4f40e21ce81d94; 6fff607e2f14bd7c63c06c464a6f93b8efbabe28 преди 96b72672ce849a1402730238e64d9b20bf06a96d; 6fff607e2f14bd7c63c06c464a6f93b8efbabe28 преди 3075c21d2d76c0067f4a382765b43d6cc10470f1; 6fff607e2f14bd7c63c06c464a6f93b8efbabe28 преди 5e19028667963fb371ebb00cecc2a473ef92056b; 6fff607e2f14bd7c63c06c464a6f93b8efbabe28 преди 63f64a510c7917658ddf4d073ece73914ee25346; 6fff607e2f14bd7c63c06c464a6f93b8efbabe28 преди f72eed9b84fb771019a955908132410a9ba9ea3f
- Linux Linux: 4.20; преди 4.20; 5.10.259 до 5.10.*; 5.15.210 до 5.15.*; 6.1.176 до 6.1.*; 6.6.143 до 6.6.*; 6.12.93 до 6.12.*; 6.18.35 до 6.18.*; 7.0.12 до 7.0.*; от 7.1 нататък
Вид слабост
История
- 19 юли 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-63926
- https://nvd.nist.gov/vuln/detail/CVE-2026-63926
- https://git.kernel.org/stable/c/f14609d8146707452e0822f3c8154674ce677251
- https://git.kernel.org/stable/c/d81b323af2dcee47573907ccb89c0df9b45cb2e2
- https://git.kernel.org/stable/c/aeb95146848d12206e1b2cfacd4f40e21ce81d94
- https://git.kernel.org/stable/c/96b72672ce849a1402730238e64d9b20bf06a96d
- https://git.kernel.org/stable/c/3075c21d2d76c0067f4a382765b43d6cc10470f1
- https://git.kernel.org/stable/c/5e19028667963fb371ebb00cecc2a473ef92056b
- https://git.kernel.org/stable/c/63f64a510c7917658ddf4d073ece73914ee25346
- https://git.kernel.org/stable/c/f72eed9b84fb771019a955908132410a9ba9ea3f