Към съдържанието
Търсене

CVE-2026-74339: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Clear variable event pointer on read snd_seq_read() copies a queued variable-length event header to userspace before expanding the payload. Queued variable-length events use SNDRV_SEQ_EXT_CHAINED internally, and data.ext.ptr points at the first extension cell. The read side strips SNDRV_SEQ_EXT_* bits from data.ext.len before the copy, but it leaves data.ext.ptr untouched. A userspace sequencer client can therefore write a direct variable event to itself and read back the extension-cell kernel address from the returned header. Clear the temporary header pointer before copy_to_user(). The original queued event remains unchanged and is still passed to snd_seq_expand_var_event(), so payload expansion keeps using the internal chain.

    Засегнати продукти

    • Linux Linux: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 8a631e1aaa1ebbc9de916927fa01707244e18291; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 14fe4f75fd5309d6b75f8e840ada88912b374207; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди f29243c211928114f8b906e0a3fee77c236f14c8; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди e0c3edd86414534cfd179fefe45b38c29c01ae7a; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 6b52211eba213c461f68922708a99d8190c1fcd5; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 74ac1ce1f4afdb3b80b6742fa28fb86c8c51d31b; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди c2ac9287e89916da684c2a548798351e63eb59ee; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 705dd6dcbc0ea87351c660c1a6443f85f1001c76
    • Linux Linux: 2.6.12; преди 2.6.12; 5.10.273 до 5.10.*; 5.15.212 до 5.15.*; 6.1.178 до 6.1.*; 6.6.145 до 6.6.*; 6.12.97 до 6.12.*; 6.18.40 до 6.18.*; 7.1.5 до 7.1.*; от 7.2 нататък

    История

    • 15 август 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-74339: Linux | freedomonline.bg