Към съдържанието
Търсене

CVE-2026-90279: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: md/raid5: round bitmap stripes with sector division raid5_bitmap_sector_map() aligns the array range to full RAID5 stripe widths before converting it to component sectors. That width is chunk_sectors multiplied by the number of data disks, and it is not always a power of two. Reproduce with a 4-disk RAID5, 1024-sector chunks, and three data disks. The full-stripe width is 3072 sectors. For a one-sector write at array sector 3072, correct rounding gives array range [3072, 6144), which maps to component range [1024, 2048). The old round_down()/round_up() logic instead gives [1024, 4096), which maps to [0, 1024). Use sector_div() based arithmetic so the rounded range is aligned to the actual RAID5 stripe width. The deterministic mapper test now reports the fixed component range as [1024, 2048), while the old mask-based range was [0, 1024).

    Засегнати продукти

    • Linux Linux: b29e6400be51c214a0ad30dce937348b57abe33a преди 9d7490007707f90691911385365bd1d691d99225; aa8e15d69f5c0044d5bff61844e163aacc4ac172 преди cab7d949b18b2f1cd625689dc16c5f81236bac93; 9c89f604476cf15c31fbbdb043cff7fbf1dbe0cb преди 02c10581866d08822c6348e299881485fc546185; 9c89f604476cf15c31fbbdb043cff7fbf1dbe0cb преди ccbdc483eb041eef809e9ff223d1ad63518a2c52; 9c89f604476cf15c31fbbdb043cff7fbf1dbe0cb преди 17ea021ae74987d6064c8195c4922fa025753892; a41a0df5d7638acf15e723ad985980b4f7ff9383; 6.6.79 преди 6.6.157; 6.12.13 преди 6.12.110; 6.13.2 преди 6.14
    • Linux Linux: 6.14; преди 6.14; 6.6.157 до 6.6.*; 6.12.110 до 6.12.*; 6.18.52 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък

    История

    • 17 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-90279: Linux | freedomonline.bg