Към съдържанието
Търсене

CVE-2026-68279: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers drm_dp_sideband_parse_remote_dpcd_read() reads num_bytes from the raw message and then unconditionally does: memcpy(bytes, &raw->msg[idx], num_bytes); without checking that idx + num_bytes <= raw->curlen. raw->msg[] is 256 bytes; if a malicious or misbehaving MST hub sets num_bytes larger than the remaining payload, the memcpy reads past the received data into whatever follows in raw->msg[]. drm_dp_sideband_parse_remote_i2c_read_ack() has the same flaw (noted with a /* TODO check */ comment since the code was introduced). Fix both functions by using a single combined check (idx + num_bytes > curlen) before each memcpy. Since num_bytes is u8, it is always >= 0, so this strictly subsumes the simpler idx > curlen form and no separate step is needed. [added missing fixes tag]

    Засегнати продукти

    • Linux Linux: ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди 185de1d74e658e2edb723ba76fa61903f77d8a68; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди d7b9b1e33b4ed8c48d4db6e6e21c257ebbbb2586; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди c2fbda0fe0163c55ba3820ee6cea0c6b43622eda; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди 22d9f7fc1aaabaf73d5f30e8b0c9aa814ecd6ed2; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди 04d953f50d61e542e94a5977822cc53735f8c0ce; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди 533d9e2bede4aeefdc2a0561d7071cfede95958f; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди e6ef5455b06cb4e5d181aabcd723791587c79f12; ad7f8a1f9ced7f049f9b66d588723f243a7034cd преди 1a8f537f5a1eeac941f262fe73078d6b08ba83c0
    • Linux Linux: 3.17; преди 3.17; 5.10.266 до 5.10.*; 5.15.217 до 5.15.*; 6.1.183 до 6.1.*; 6.6.148 до 6.6.*; 6.12.101 до 6.12.*; 6.18.42 до 6.18.*; 7.1.6 до 7.1.*; от 7.2 нататък

    История

    • 10 август 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-68279: Linux | freedomonline.bg