Към съдържанието
Търсене

CVE-2026-64252: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: MIPS: DEC: Prevent initial console buffer from landing in XKPHYS In 64-bit configurations calling the initial console output handler from a kernel thread other than the initial one will result in a situation where the stack has been placed in the XKPHYS 64-bit memory segment and consequently so has been the buffer allocated there that is used as the argument corresponding to the `%s' output conversion specifier for the firmware's printf() entry point. This 64-bit address will then be truncated by 32-bit firmware, resulting in an attempt to access the wrong memory location, which in turn will cause all kinds of unpredictable behaviour, such as a kernel crash: Console: colour dummy device 160x64 Calibrating delay loop... 49.36 BogoMIPS (lpj=192512) pid_max: default: 32768 minimum: 301 CPU 0 Unable to handle kernel paging request at virtual address 000000000203bd00, epc == ffffffffbfc08364, ra == ffffffffbfc08800 Oops[#1]: CPU: 0 PID: 0 Comm: swapper Not tainted 5.18.0-rc2-00254-gfb649bda6f56-dirty #121 $ 0 : 0000000000000000 0000000000000001 0000000000000023 ffffffff80684ba0 $ 4 : 000000000203bd00 ffffffffbfc0f3b4 ffffffffffffffff 0000000000000073 $ 8 : 0a303d7469000000 0000000000000000 0000000000000073 ffffffffbfc0f473 $12 : 0000000000000002 0000000000000000 ffffffff80684c1c 0000000000000000 $16 : 0000000000000000 ffffffff80596dc9 0000000000000000 ffffffffbfc09240 $20 : ffffffff80684c40 ffffffffbfc0f400 000000000000002d 000000000000002b $24 : ffffffffffffffbf 000000000203bd00 $28 : ffffffff805f0000 ffffffff80684b58 0000000000000030 ffffffffbfc08800 Hi : 0000000000000000 Lo : 0000000000000aa8 epc : ffffffffbfc08364 0xffffffffbfc08364 ra : ffffffffbfc08800 0xffffffffbfc08800 Status: 140120e2 KX SX UX KERNEL EXL Cause : 00000008 (ExcCode 02) BadVA : 000000000203bd00 PrId : 00000430 (R4000SC) Modules linked in: Process

    Засегнати продукти

    • Linux Linux: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 9e22b6fc6532cd566dad6d89d8fb3885248e364a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 1c80327dedf05b8c8ca025b76c21235b19dd3a86; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 8a15826e5d3bdcfbef2f8e9330c69ea9ee7282e7; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди ab465495b1ed5efb7d2f9b90d8b20b1e0473e26f; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 35212f2adc2cf15122b96b987519de235b855e46; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 6e61fc2e06e44b6d30248cc5bc47a58e75c2b43e; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 07c245bc39f94481fd75ff1ed54f7ab97111f3dd; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 7fb13fd35110ebe95eb053faf79d018f51144d85
    • Linux Linux: 2.6.12; преди 2.6.12; 5.10.260 до 5.10.*; 5.15.211 до 5.15.*; 6.1.177 до 6.1.*; 6.6.144 до 6.6.*; 6.12.95 до 6.12.*; 6.18.38 до 6.18.*; 7.1.3 до 7.1.*; от 7.2 нататък

    История

    • 24 юли 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-64252: Linux | freedomonline.bg