CVE-2026-92495: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap bnxt_re_mmap() rejects VM_WRITE for the DBR_PAGE and TOGGLE_PAGE mmap flags, but a read-only mapping can still retain VM_MAYWRITE. nd later be upgraded with mprotect(PROT_WRITE). This can bypass the write check that only runs at mmap time. Clear VM_MAYWRITE before vm_insert_page() in the shared DBR/toggle-page branch, matching the existing policy that userspace writes are not expected for these pages.

Засегнати продукти

• Linux Linux: ea222485788208cd79bad42d25aae9232b33a934 преди 5361fb1e5bc246f9a2c0721543f72c8dac200769; ea222485788208cd79bad42d25aae9232b33a934 преди 13e7861809ef9e7e720ff5f0af1d4293a6d0a9b4; ea222485788208cd79bad42d25aae9232b33a934 преди 0afbfe019c881483337d9f8304e678af05ebe7cc; ea222485788208cd79bad42d25aae9232b33a934 преди 518df61b9b0a5b288dfa72c87246045329c18b8c; ea222485788208cd79bad42d25aae9232b33a934 преди 9b66c9af7172ffcf727214fa0ebe9a5e1ed6eb16
• Linux Linux: 6.6; преди 6.6; 6.6.157 до 6.6.*; 6.12.110 до 6.12.*; 6.18.52 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-92495
• https://nvd.nist.gov/vuln/detail/CVE-2026-92495
• https://git.kernel.org/stable/c/5361fb1e5bc246f9a2c0721543f72c8dac200769
• https://git.kernel.org/stable/c/13e7861809ef9e7e720ff5f0af1d4293a6d0a9b4
• https://git.kernel.org/stable/c/0afbfe019c881483337d9f8304e678af05ebe7cc
• https://git.kernel.org/stable/c/518df61b9b0a5b288dfa72c87246045329c18b8c
• https://git.kernel.org/stable/c/9b66c9af7172ffcf727214fa0ebe9a5e1ed6eb16