Към съдържанието
Търсене

CVE-2026-74290: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: Dont expose folded kernel pointers The flow classifier falls back to addr_fold() for fields that are missing from packet headers. In map mode, userspace controls mask, xor, rshift, addend and divisor, and can observe the resulting classid through class statistics. This allows a tc classifier in a user/network namespace to recover the 32-bit folded value of skb->sk, skb_dst() or skb_nfct(). Align with standard kernel practices for pointer hashing and replace the XOR folding with a keyed siphash (which is cryptographically secure)

    Засегнати продукти

    • Linux Linux: e5dfb815181fcb186d6080ac3a091eadff2d98fe преди 19f2ecf8ea564562c7e7a919cf38068dd9aa1c96; e5dfb815181fcb186d6080ac3a091eadff2d98fe преди 3d054001860270748405a3f9270c5fa0bf7ffc19; e5dfb815181fcb186d6080ac3a091eadff2d98fe преди fb31fbe51c233f3bf47021121f63d2e42cac2d08; e5dfb815181fcb186d6080ac3a091eadff2d98fe преди 0a8b5b74f0e6b6b9ce453bcfa4baa502c4c7577a; e5dfb815181fcb186d6080ac3a091eadff2d98fe преди 6151159618198675e01c391676e579738286c135; e5dfb815181fcb186d6080ac3a091eadff2d98fe преди f294fc71c4a0fa4964f6428a1b4e7929c1d83125
    • Linux Linux: 2.6.25; преди 2.6.25; 6.1.178 до 6.1.*; 6.6.145 до 6.6.*; 6.12.97 до 6.12.*; 6.18.40 до 6.18.*; 7.1.5 до 7.1.*; 7.2 до *

    История

    • 15 август 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-74290: Linux | freedomonline.bg