Към съдържанието
Търсене

CVE-2026-74670: Linux

7.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: ipvs: stop estimator after disabled calc phase IPVS estimator kthread 0 starts with zeroed chain and tick limits until its initial calculation phase completes. If network namespace teardown clears ipvs->enable during that phase, ip_vs_est_calc_phase() can return without installing positive limits. The kthread can then continue into its main loop and drain est_temp_list with zero chain_max, tick_max and est_max_count values. Each enqueue consumes one available tick row, but est_count never reaches the zero est_max_count value. After all rows are consumed, the row lookup returns IPVS_EST_NTICKS and ip_vs_enqueue_estimator() writes past the ticks and tick_len arrays. Exit kthread 0 after the calculation phase if the kthread is stopping or IPVS has been disabled. That keeps temporary estimators from being drained after the limits failed to initialize. Estimator kthreads can now self-exit before teardown or reload stops kd->task. Keep an extra task reference after creation and release it with kthread_stop_put(), so kd->task remains valid until the stop paths consume that reference.

    Засегнати продукти

    • Linux Linux: 705dd34440812735ece298eb5bc153fde9544d42 преди d5122a2b2601145975d387006e517c56896e310e; 705dd34440812735ece298eb5bc153fde9544d42 преди de98dc5ef94b83bbb444c670c253ea02ca0f5e43; 705dd34440812735ece298eb5bc153fde9544d42 преди e7f34f29b330265d456943bf0b984dcecfcef9af; 705dd34440812735ece298eb5bc153fde9544d42 преди 2335dedc1922dfa889ca1f9f70370924e8e79a08; 705dd34440812735ece298eb5bc153fde9544d42 преди 558f67f1340f803a346ecd14a69c49653111c5f4
    • Linux Linux: 6.2; преди 6.2; 6.6.152 до 6.6.*; 6.12.104 до 6.12.*; 6.18.45 до 6.18.*; 7.1.9 до 7.1.*; от 7.2 нататък

    История

    • 22 август 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-74670: Linux | freedomonline.bg