Към съдържанието
Търсене

CVE-2026-74679: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: Use unsigned int for ndp_index The variable ndp_index is declared as a signed integer, but it stores the return value of get_ncm(), which is unsigned. A malicious host can supply a large offset that overflows the signed ndp_index, making it negative. Because ndp_index is compared against unsigned bounds, this negative value bypasses sanity checks and leads to an out-of-bounds read when calculating the address of the NDP block (ntb_ptr + ndp_index). Fix this by changing ndp_index to unsigned int to ensure consistent unsigned comparisons throughout the function.

    Засегнати продукти

    • Linux Linux: 370af734dfaf8336b496b386e194648e097e248a преди 9c8c6825a750fcd3efbe922847ca70ccd5a66857; 370af734dfaf8336b496b386e194648e097e248a преди a1c0deeba4a46481543d6b09c665f758c54c3a1a; 370af734dfaf8336b496b386e194648e097e248a преди d13f650a3485b58c124b3cda45597e8002c9c833; 370af734dfaf8336b496b386e194648e097e248a преди 11413d7ed42174b8f5d8d0b6a25d10dc88239b21; 370af734dfaf8336b496b386e194648e097e248a преди 5b2b3a3229a3f4c493ffdee53aee2f173b6f13b3; 370af734dfaf8336b496b386e194648e097e248a преди d328fdc607fa1bb668ad512e1c918a120f78f337; 370af734dfaf8336b496b386e194648e097e248a преди fc9e54e22845c4da29588ca0986cb7c795b5a262; 370af734dfaf8336b496b386e194648e097e248a преди 6b1c8a9403a26cb0fed7a648916c74dc236da591
    • Linux Linux: 3.17; преди 3.17; 5.10.265 до 5.10.*; 5.15.216 до 5.15.*; 6.1.183 до 6.1.*; 6.6.152 до 6.6.*; 6.12.104 до 6.12.*; 6.18.45 до 6.18.*; 7.1.9 до 7.1.*; 7.2 до *

    История

    • 22 август 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-74679: Linux | freedomonline.bg