Към съдържанието

CVE-2026-72079: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix use-after-free and double-free in disconnect ims_pcu_disconnect() only intended to perform cleanup when the primary (control) interface is unbound. However, it currently relies on the interface class to distinguish between control and data interfaces. A malicious device could present a data interface with the same class as the control interface, leading to premature cleanup and potential use-after-free or double-free. Switch to verifying that the interface being disconnected is indeed the control interface.

    Засегнати продукти

    • Linux Linux: 628329d52474323938a03826941e166bc7c8eff4 преди 315f269ea04bc1477ab9bf351e939623d12a1621; 628329d52474323938a03826941e166bc7c8eff4 преди 293388e42e5c0865204de6f36bfb8662156fce3b; 628329d52474323938a03826941e166bc7c8eff4 преди 921abbb33887052e46b1b77299f87a3c741dc580; 628329d52474323938a03826941e166bc7c8eff4 преди 6a6c373e6a82eddc522342c8a8db7072c65f2b56; 628329d52474323938a03826941e166bc7c8eff4 преди a4b3f4d42fbf58f06f0d49e37a9d0d9392eca338; 628329d52474323938a03826941e166bc7c8eff4 преди 6aacc18004b1a915ccb8a829d30279a37988066e; 628329d52474323938a03826941e166bc7c8eff4 преди bf0b58ba489d0bdaa18c7dd8beeaeb954dd7dbb7; 628329d52474323938a03826941e166bc7c8eff4 преди 462a999917755a3bf77448dfd64307963cf0a9f0
    • Linux Linux: 3.10; преди 3.10; 5.10.261 до 5.10.*; 5.15.212 до 5.15.*; 6.1.178 до 6.1.*; 6.6.145 до 6.6.*; 6.12.97 до 6.12.*; 6.18.40 до 6.18.*; 7.1.5 до 7.1.*; от 7.2 нататък

    История

    • 15 август 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-72079: Linux | freedomonline.bg