Към съдържанието
Търсене

CVE-2026-68277: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Three sideband reply parsers read 16-bit fields as: val = (raw->msg[idx] << 8) | (raw->msg[idx+1]); and check bounds only after the fact. When idx == raw->curlen, raw->msg[idx+1] reads one byte past the received message data into the following struct fields (curchunk_len, curchunk_idx, curlen). Affected functions: - drm_dp_sideband_parse_enum_path_resources_ack() full_payload_bw_number and avail_payload_bw_number fields - drm_dp_sideband_parse_allocate_payload_ack() allocated_pbn field - drm_dp_sideband_parse_query_payload_ack() allocated_pbn field Fix by using a single combined check (idx + 2 > curlen) before each 2-byte read. Since the check is strictly tighter than idx > curlen, no separate step is needed. [added fixes tag]

    Засегнати продукти

    • Linux Linux: ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди c1f72a13d54ffd16647d3fa540d961f5deba8790; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди 192e146c2d57ad033b0d418ec64ee390f8dc074e; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди 6e3107e6522109a07fc9bb0fc4ec463f1982e113; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди bdf0508b1e6785d4a8982c637e97e68d60b47d7b; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди 0bcd7675c69a2462a8531fcd9e4d096e9c7ec5df; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди d5c70523cafa26ad2c7a37b612849abe2683baa8; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди 68a624416d1dd481b3e5b7ea0e8a070a9b8a2c73; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди 6b89ba3dba2f583626fb693e47e951ffb8bf591f
    • Linux Linux: 3.17; преди 3.17; 5.10.266 до 5.10.*; 5.15.217 до 5.15.*; 6.1.183 до 6.1.*; 6.6.148 до 6.6.*; 6.12.101 до 6.12.*; 6.18.42 до 6.18.*; 7.1.6 до 7.1.*; от 7.2 нататък

    История

    • 10 август 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-68277: Linux | freedomonline.bg