Към съдържанието

CVE-2026-90259: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() In that function, we round down the start position and round up the ending position. But during the calculation of @len, we use "round_up(start + len, sectorsize)", which is the rounded up end position, not the rounded up length. Which results a much larger length, and later we are still using "start + len", which is completely incorrect. Fix it by declaring a local @aligned_start and @aligned_len and use them instead.

    Засегнати продукти

    • Linux Linux: bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 преди 036e6c216be66a085da3a0519f1be5f3230b6e26; bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 преди 202ac9e469b78817512921c5db05cc2140e4ca43; bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 преди 34adc843c28e5cd1f533a1d64f51b0f756fdf945; bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 преди e6edde29990af8064b9d12217ec03db231ccd55d; bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 преди c4c136555ff90f1e2921cc42da43daac0ef9985e; bc42bda22345efdb5d8b578d1b4df2c6eaa85c58 преди 9102b179512e11644fb0489ae62010a09afa199c
    • Linux Linux: 4.13; преди 4.13; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.114 до 6.12.*; 6.18.52 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък

    История

    • 17 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-90259: Linux | freedomonline.bg