Към съдържанието
Търсене

CVE-2026-74522: Linux

8.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, с обикновен потребителски вход и без действие от потребителя.

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __close_file_table_ids() A ksmbd_file can remain alive after logical close while another session holds a temporary reference obtained through ksmbd_lookup_fd_inode(). ksmbd_close_fd() currently marks the file closed and drops the idr-owned reference, but leaves the pointer published in the closing session's idr until the final reference is dropped. If the foreign holder performs the final ksmbd_fd_put(), __put_fd_final() supplies the foreign session's file table to __ksmbd_close_fd(). The object is then freed without being removed from its owner's idr, and the owner session later dereferences the stale pointer during file-table teardown. Remove the volatile id from the owner's idr while ksmbd_close_fd() still holds that table's lock, and clear volatile_id before dropping the idr-owned reference. A later foreign final put then only performs physical destruction and cannot remove the object from the wrong table.

    Засегнати продукти

    • Linux Linux: 8510a043d334ecdf83d4604782f288db6bf21d60 преди 19bfd90d5aaf63217735d81964585c5306158e5f; 8510a043d334ecdf83d4604782f288db6bf21d60 преди 67aaec2a1fdce3e1dde46c45b5d1ef8cf22f65cd; 8510a043d334ecdf83d4604782f288db6bf21d60 преди 0c3918c2cee62ec6c9de8d5c73ebfe6f833961ac; 8510a043d334ecdf83d4604782f288db6bf21d60 преди 9be4a66f019ea90bd9deca70511f4f9ffebf5c6f; 8510a043d334ecdf83d4604782f288db6bf21d60 преди cffbdc86393b0235383a20c8c59bc32f16036459; 8510a043d334ecdf83d4604782f288db6bf21d60 преди e7188199eff46a636f3436356f0aae039be6dd66; df30cbfd3d8a70e61ce59f63ce5ed2261799ac10; aaf1d5ebb358f546414965b39da90107a7ca7ce5; 5.15.38 преди 5.16; 5.17.6 преди 5.18
    • Linux Linux: 5.18; преди 5.18; 6.1.183 до 6.1.*; 6.6.151 до 6.6.*; 6.12.103 до 6.12.*; 6.18.44 до 6.18.*; 7.1.8 до 7.1.*; 7.2 до *

    История

    • 15 август 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-74522: Linux | freedomonline.bg