Към съдържанието
Търсене

CVE-2026-89536: Linux

9.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: SUNRPC: wait for in-flight client TLS handshake callback xs_tls_handshake_sync() gives xs_tls_handshake_done() a reference to the lower transport before submitting the handshake request. On timeout or signal, the synchronous waiter drops that reference after calling tls_handshake_cancel(). handshake_req_cancel() returns false when handshake_complete() has already marked the request complete. In that case the completion callback can still be running, so dropping the callback-owned reference in the waiter can free the lower transport before xs_tls_handshake_done() stores xprt_err or drops its own reference. If cancellation loses to completion, wait until xs_tls_handshake_done() signals handshake_done and let the callback release its reference. This mirrors the server-side handshake lifetime handling and keeps the timeout or signal return value unchanged.

    Засегнати продукти

    • Linux Linux: 75eb6af7acdf566c68d61e98e67ee2f235201c02 преди fb43997407bc17ee39bac81ab708101312e255f5; 75eb6af7acdf566c68d61e98e67ee2f235201c02 преди 15431820f448e09f8029b670d5c82aa5917d4625; 75eb6af7acdf566c68d61e98e67ee2f235201c02 преди 1de391e8b94e31b45c19c16dbf315e294810c7de; 75eb6af7acdf566c68d61e98e67ee2f235201c02 преди 7fbb6d2ab0391eb8d1f1a68e6bc263ef02cea61b; 75eb6af7acdf566c68d61e98e67ee2f235201c02 преди a89dd597458848b463d284b15e42a8078beeb046
    • Linux Linux: 6.5; преди 6.5; 6.6.157 до 6.6.*; 6.12.109 до 6.12.*; 6.18.50 до 6.18.*; 7.2.4 до 7.2.*; от 7.3 нататък

    История

    • 11 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-89536: Linux | freedomonline.bg