Към съдържанието
Търсене

CVE-2026-98778: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: binder: fix is_failure flag for superseded transaction cleanup When a TF_UPDATE_TXN transaction supersedes a pending async transaction, binder_release_entire_buffer() is called with is_failure=false. Since the superseded transaction was never delivered, binder_apply_fd_fixups() was never called and no fds were installed in the target process. With is_failure=false, the BINDER_TYPE_FDA cleanup handler interprets stale buffer contents as installed fd numbers and passes them to binder_deferred_fd_close(), closing unrelated file descriptors. Pass is_failure=true since the transaction was never delivered to the target, matching the semantics of all other undelivered-transaction cleanup paths.

    Засегнати продукти

    • Linux Linux: 9864bb4801331daa48514face9d0f4861e4d485b преди f4c072e544b8c15e6b9157208761db6fa4fe95a1; 9864bb4801331daa48514face9d0f4861e4d485b преди e9b364e46d594c2ec663c9c49f10c1ca541ecc0f; 9864bb4801331daa48514face9d0f4861e4d485b преди 60a9f7323ae7318a7cce0d387c318da24f1e8726; 9864bb4801331daa48514face9d0f4861e4d485b преди 86cdcc87d4ba60aebf94ba3346b3c900c5cd79ff; 9864bb4801331daa48514face9d0f4861e4d485b преди 1ab671b50714ad8e359cf37eb041d8044319ccdc; 9864bb4801331daa48514face9d0f4861e4d485b преди 22c135635fdd9816c0ef140d6de7b2e4fdf73e89
    • Linux Linux: 6.0; преди 6.0; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.113 до 6.12.*; 6.18.56 до 6.18.*; 7.2.10 до 7.2.*; от 7.3 нататък

    История

    • 18 октомври 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-98778: Linux | freedomonline.bg