9.8
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix skb double-free in xfrm_dev_direct_output() A return value other than 1 from local_out() means that the skb has been consumed or its ownership was transferred. xfrm_dev_direct_output() nevertheless frees the skb on this path, causing a double-free when netfilter drops the packet and invalidating any other owner. Return the local_out() result directly, matching the ownership handling in xfrm_output_resume().
Засегнати продукти
- Linux Linux: bfb9b9404a53a72524ce695551755117e9d3deb0 преди 621871b696b108026bf4b44ed4085ffa2102f417; a0395e96831adee8ffa016bf958e4dce9ece656e преди bc9297796bfdcc8d9609236e54519a4f38737aac; 5eddd76ec2fd1988f0a3450fde9730b10dd22992 преди 02deb637e965950148752a304dd1471212dd6470; 5eddd76ec2fd1988f0a3450fde9730b10dd22992 преди 56a347950e661c1a7f8f31c43a2ea53c2323b6f4; 5eddd76ec2fd1988f0a3450fde9730b10dd22992 преди 2aed51fc58d9ce450e2c116efb956160fd06fa02; d1d673a5bede3767252cff19c0ab1e5387c6f43f; 6.6.85 преди 6.6.157; 6.12.21 преди 6.12.110; 6.13.9 преди 6.14
- Linux Linux: 6.14; преди 6.14; 6.6.157 до 6.6.*; 6.12.110 до 6.12.*; 6.18.52 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък
История
- 17 септември 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-92489
- https://nvd.nist.gov/vuln/detail/CVE-2026-92489
- https://git.kernel.org/stable/c/621871b696b108026bf4b44ed4085ffa2102f417
- https://git.kernel.org/stable/c/bc9297796bfdcc8d9609236e54519a4f38737aac
- https://git.kernel.org/stable/c/02deb637e965950148752a304dd1471212dd6470
- https://git.kernel.org/stable/c/56a347950e661c1a7f8f31c43a2ea53c2323b6f4
- https://git.kernel.org/stable/c/2aed51fc58d9ce450e2c116efb956160fd06fa02