CVE-2026-93198: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate the persisted dirty_tail chain at load The writeback worker follows the persisted dirty_tail chain, which is decoded from the cache device independently of the key_tail chain that cache_replay() walks and bounds. A crafted image, whose on-media fields are authenticated only by a crc32c with a fixed seed, can aim dirty_tail at a chain of last ksets that never terminates, so cache_writeback_fn() re-arms itself with no delay forever. Walk the dirty_tail chain once at load with the same hop cap cache_replay() uses and fail the table load with -EIO if it does not reach an end within n_segs hops.

Засегнати продукти

• Linux Linux: 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 преди 8195cf3f4a82ef49d9b0651c507ed0784caf23fb; 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 преди 4822a030929e0e77aa380722dc42e3e4c9edd346; 1d57628ff95b32d5cfa8d8f50e07690c161e9cf0 преди 58d620ee9e01d4bdbceaf2ae1450d307a2a9d58b
• Linux Linux: 6.18; преди 6.18; 6.18.52 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-93198
• https://nvd.nist.gov/vuln/detail/CVE-2026-93198
• https://git.kernel.org/stable/c/8195cf3f4a82ef49d9b0651c507ed0784caf23fb
• https://git.kernel.org/stable/c/4822a030929e0e77aa380722dc42e3e4c9edd346
• https://git.kernel.org/stable/c/58d620ee9e01d4bdbceaf2ae1450d307a2a9d58b