Няма оценка
CVSS
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in list_version_get_info sizeof(tt->version) is 12 bytes, but the code writes 16 bytes into the output buffer - info->vers->version[0], info->vers->version[1], info->vers->version[2] and info->vers->next. This can cause buffer overflow. Fix this buffer overflow by replacing "sizeof(tt->version)" with "sizeof(struct dm_target_versions)".
Засегнати продукти
- Linux Linux: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 3cba74d3fb2c1890ffae019301227d1366f74907; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 29536a9ff146d9bbd618959857ed2e691cda1d21; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди e0f5842c4e2a7dbefb52a2dc6711789bc6963e55; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди d61c12573ed9768690fdcb2bc38846a1bcb01358; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди df50c24c6447c18886ed126d3d81cc7e155ea8b6; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 76c6f845dc0c614304a6e6ee619b552f97cf24b3
- Linux Linux: 2.6.12; преди 2.6.12; 6.1.191 до 6.1.*; 6.6.145 до 6.6.*; 6.12.97 до 6.12.*; 6.18.40 до 6.18.*; 7.1.5 до 7.1.*; 7.2 до *
История
- 15 август 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-72106
- https://nvd.nist.gov/vuln/detail/CVE-2026-72106
- https://git.kernel.org/stable/c/3cba74d3fb2c1890ffae019301227d1366f74907
- https://git.kernel.org/stable/c/29536a9ff146d9bbd618959857ed2e691cda1d21
- https://git.kernel.org/stable/c/e0f5842c4e2a7dbefb52a2dc6711789bc6963e55
- https://git.kernel.org/stable/c/d61c12573ed9768690fdcb2bc38846a1bcb01358
- https://git.kernel.org/stable/c/df50c24c6447c18886ed126d3d81cc7e155ea8b6
- https://git.kernel.org/stable/c/76c6f845dc0c614304a6e6ee619b552f97cf24b3