Към съдържанието
Търсене

CVE-2026-80652: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to query the length of the relevant blobs. Failure to account for the zero-length buffer trips a BUG_ON() when running with CONFIG_DEBUG_VIRTUAL=y due to trying to get the physical address of the ZERO_SIZE_PTR (returned by kzalloc() on the bogus allocation). kernel BUG at arch/x86/mm/physaddr.c:28 ! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 30 UID: 0 PID: 28580 Comm: syz.2.18 Kdump: loaded Tainted: G W 6.18.16-smp-DEV #1 NONE Tainted: [W]=WARN Hardware name: Google, Inc. Arcadia_IT_80/Arcadia_IT_80, BIOS 12.62.0-0 11/19/2025 RIP: 0010:__phys_addr+0x16a/0x180 arch/x86/mm/physaddr.c:28 RSP: 0018:ffffc9008329fc80 EFLAGS: 00010293 RAX: ffffffff8179110a RBX: 0000778000000010 RCX: ffff8884e6992600 RDX: 0000000000000000 RSI: 0000000080000010 RDI: 0000778000000010 RBP: ffffc9008329fdf0 R08: 0000000000000dc0 R09: 00000000ffffffff R10: dffffc0000000000 R11: fffffbfff126d297 R12: dffffc0000000000 R13: 1ffff92010653fc8 R14: 0000000080000010 R15: dffffc0000000000 FS: 0000555556bec9c0(0000) GS:ffff88aa4ce1c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd3159e7000 CR3: 00000004fbc44000 CR4: 0000000000350ef0 Call Trace: <TASK> [<ffffffff853d3869>] sev_ioctl_do_pdh_export+0x559/0x7a0 drivers/crypto/ccp/sev-dev.c:2308 [<ffffffff853d1fdd>] sev_ioctl+0x2cd/0x480 drivers/crypto/ccp/sev-dev.c:2556 [<ffffffff82549ebc>] vfs_ioctl fs/ioctl.c:52 [inline] [<ffffffff82549ebc>] __do_sys_ioctl fs/ioctl.c:598 [inline] [<ffffffff82549ebc>] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:584 [<ffffffff8630115f>] do_syscall_x64 arch/x86/entry/syscall_64.c:64 [inline] [<ffffffff8630115f>] do_syscall_64+0x9f/0xf40 arch/x86/entry/syscall_64.c:98

    Засегнати продукти

    • Linux Linux: 76a2b524a4b1d6dc0f2421f9854a01d55d5e5436 преди 1c587f30c6242cc37b3d6ee6d91daef84e51633f; 76a2b524a4b1d6dc0f2421f9854a01d55d5e5436 преди 13b4d5e055d344e34b864bced0a591ceaac7ad81; 76a2b524a4b1d6dc0f2421f9854a01d55d5e5436 преди 94344bc7c9d70b04be718d841b92873aa3ea8191; 76a2b524a4b1d6dc0f2421f9854a01d55d5e5436 преди 50c3c7df4f26d36b30bc950a7d780f7029fd52f8; 76a2b524a4b1d6dc0f2421f9854a01d55d5e5436 преди ee717e73ab47253c82c134c342e32fcdfcfccd87; 76a2b524a4b1d6dc0f2421f9854a01d55d5e5436 преди 21650fe221ea9b72809140b691589dde8bff3eab; 76a2b524a4b1d6dc0f2421f9854a01d55d5e5436 преди d88071a6ce091272726bedda26c105b85b23705f; 76a2b524a4b1d6dc0f2421f9854a01d55d5e5436 преди ef8c9dacda2871accd64e3eda951fef6b788b1ea
    • Linux Linux: 4.16; преди 4.16; 5.10.261 до 5.10.*; 5.15.212 до 5.15.*; 6.1.178 до 6.1.*; 6.6.145 до 6.6.*; 6.12.97 до 6.12.*; 6.18.40 до 6.18.*; 7.1.5 до 7.1.*; 7.2 до *

    История

    • 28 август 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-80652: Linux | freedomonline.bg