Към съдържанието
Търсене

CVE-2026-74291: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: ASoC: topology: Check PCM and DAI name strings before use Topology objects store several PCM and DAI names in fixed-size UAPI arrays. Other topology parser paths validate these fields with bounded strnlen() checks before using them as C strings, but the PCM and DAI paths still pass some fixed-size arrays directly to strlen(), devm_kstrdup(), DAI lookup, and diagnostic prints. A malformed topology blob with a non-NUL-terminated PCM, DAI, or stream capability name can therefore make the parser read past the end of the fixed-size field. Reject unterminated PCM and DAI name fields before consuming them as C strings.

    Засегнати продукти

    • Linux Linux: 64527e8a352968bda529f01df1c9dd5fe581ff04 преди d09dad8dff862c4b5aac48b1223e512074ffeb08; 64527e8a352968bda529f01df1c9dd5fe581ff04 преди c405b07246bf179e9457de57501c3470175b165e; 64527e8a352968bda529f01df1c9dd5fe581ff04 преди 473f7d25d93e80db526a9d05887f0071abdc6d9b; 64527e8a352968bda529f01df1c9dd5fe581ff04 преди 5c2537cf24d673956b4e58029001667f89586fa2; 64527e8a352968bda529f01df1c9dd5fe581ff04 преди ba37b62ed0a443b8e23f53a7477e7f2537fd34c7; 64527e8a352968bda529f01df1c9dd5fe581ff04 преди b7e44d1986d6671342c19b82192189ca5db5dab7
    • Linux Linux: 4.6; преди 4.6; 6.1.191 до 6.1.*; 6.6.158 до 6.6.*; 6.12.111 до 6.12.*; 6.18.53 до 6.18.*; 7.1.5 до 7.1.*; от 7.2 нататък

    История

    • 15 август 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-74291: Linux | freedomonline.bg