Към съдържанието
Търсене

CVE-2026-98456: Linux

7.0

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, при специфични условия, с обикновен потребителски вход и без действие от потребителя.

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix race in read_unconf_index_list() read_unconf_index_list() counts unconfigured controllers before allocating its response, then checks the device flags again while filling it. hci_dev_list_lock stabilizes list membership, but it does not serialize the per-device flags. During asynchronous controller setup, the worker can set HCI_UNCONFIGURED and clear HCI_SETUP between the two passes. A controller omitted from the allocation count can then become eligible for the fill pass, causing an out-of-bounds write to rp->index[]. Allocate space for every device on hci_dev_list. Since list membership cannot change while hci_dev_list_lock is held, the response remains large enough regardless of flag transitions. The reported count and response length still include only eligible unconfigured controllers.

    Засегнати продукти

    • Linux Linux: 73d1df2a7a1036a1f000e5f0ece6ade3e082b854 преди fa6f79bb0009406bb11e6912b53ab7c564d6f06b; 73d1df2a7a1036a1f000e5f0ece6ade3e082b854 преди 76dc7e0297f6f7ebefc36a69251e3f4a676d9853; 73d1df2a7a1036a1f000e5f0ece6ade3e082b854 преди 9c32455f490b960efccedd041c7aabb1a04c5cc4; 73d1df2a7a1036a1f000e5f0ece6ade3e082b854 преди 524e0450dd9a396f99a81b045219b0e2ea0dab57; 73d1df2a7a1036a1f000e5f0ece6ade3e082b854 преди 8ddf962c76432a10a6cb80042875cbc48a9c056b; 73d1df2a7a1036a1f000e5f0ece6ade3e082b854 преди 416546cd6a54e9b68f2b91bc680b1ee17dcd77a1; 73d1df2a7a1036a1f000e5f0ece6ade3e082b854 преди 2e8bba0360d1379bfa8da47c8f5dadbb10a3fba1; 73d1df2a7a1036a1f000e5f0ece6ade3e082b854 преди b5dbb41b212c50c095a4dbee3017a84fe94f033b
    • Linux Linux: 3.17; преди 3.17; 5.10.273 до 5.10.*; 5.15.224 до 5.15.*; 6.1.191 до 6.1.*; 6.6.158 до 6.6.*; 6.12.112 до 6.12.*; 6.18.55 до 6.18.*; 7.2.9 до 7.2.*; от 7.3 нататък

    История

    • 18 октомври 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-98456: Linux | freedomonline.bg