Към съдържанието
Търсене

CVE-2026-90046: Linux

7.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, с обикновен потребителски вход и без действие от потребителя.

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: don't spin_trylock() in NMI on UP Patch series "mm/page_alloc: fixes for free_pages_nolock() on RT/UP". Pre-existing bugs found by Sashiko during review of this other series: https://lore.kernel.org/all/[email protected]/ I have not reproduced these bugs, and I suspect there is no real-world user that is affected by them. This patch (of 2): As noted in can_spin_trylock(), using this is unsafe in this context. commit 620b46ed6ae17 ("mm/page_alloc: return NULL early from alloc_frozen_pages_nolock() in NMI on UP") fixed this on the alloc side but missed the free side. Impact: If BPF programs using these features in NMI (probably tracing) are present on non-SMP builds this might crash the kernel and is probably exploitable by local attackers for privilege escalation.

    Засегнати продукти

    • Linux Linux: 8c57b687e8331eb80e302a2c528b18b966a9ac7a преди 06c76d3c389ff504052f64b1acee44651bd847fa; 8c57b687e8331eb80e302a2c528b18b966a9ac7a преди 68a069b407303e71db371df85036101e8ff59280; 8c57b687e8331eb80e302a2c528b18b966a9ac7a преди 3105ae628fb785d48b49256468be4f21a7b3cfc0
    • Linux Linux: 6.15; преди 6.15; 6.18.51 до 6.18.*; 7.2.5 до 7.2.*; от 7.3 нататък

    История

    • 16 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-90046: Linux | freedomonline.bg