CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them Update nft_dup and nft_fwd to use the nf_dev_xmit_recursion() helpers. This patch also disables BH when transmitting the skb to address a possible migration to different CPU leading to imbalanced decrementation of the recursion counters. This is modeled after Florian Westphal's dev_xmit_recursion*() API available since commit 97cdcf37b57e ("net: place xmit recursion in softnet data") according to its current state in the tree.
Засегнати продукти
- Linux Linux: f37ad91270397a6d053e8623bdb3cf79859691d2 преди 53fb46cf933dc4361c1a72491e247841d0b0fc85; f37ad91270397a6d053e8623bdb3cf79859691d2 преди edf234f71fb327792196f813048ab8f5bd3bb712; f37ad91270397a6d053e8623bdb3cf79859691d2 преди 2354e975932dabb06fad239f07a3b68fd1809737
- Linux Linux: 6.16; преди 6.16; 6.18.57 до 6.18.*; 7.1.5 до 7.1.*; 7.2 до *
История
- 15 август 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-74260
- https://nvd.nist.gov/vuln/detail/CVE-2026-74260
- https://git.kernel.org/stable/c/53fb46cf933dc4361c1a72491e247841d0b0fc85
- https://git.kernel.org/stable/c/edf234f71fb327792196f813048ab8f5bd3bb712
- https://git.kernel.org/stable/c/2354e975932dabb06fad239f07a3b68fd1809737