Към съдържанието
Търсене

CVE-2026-98857: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: ipvs: bound LBLCR and LBLC cache growth ip_vs_lblcr_new() and ip_vs_lblc_new() create cache entries for every previously unseen destination address. The table max_size only tells the periodic collector to reclaim entries after the cache has already exceeded the limit. It does not reclaim entries that the attacker continues to use. Reject new cache entries once either table reaches max_size * 3 / 2. The extra headroom lets the periodic collector catch up while the existing scheduler fallback continues to use the selected destination when cache creation fails. New traffic therefore stays serviceable without growing the tables further.

    Засегнати продукти

    • Linux Linux: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 8b93288b4543ad5139a25a5b211a07bf755652dd; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди f6e9446bfb79907d3092fc45a0054b0c3b329bfe; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 488eaba207dd2e4c5afc65e18dc237d70f01d283; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди bc9ff8e64771cc32a216953fe615386f46ac1eaa; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 31028d7b970962fbeda1e9131405c76551094300; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 6316d17324bd4ca400c26adb7b656c6e3447c209; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 16c83c047ecfaf226ad81d45d77fa11a3184d0e4; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 преди 2a3c3de660f96865f303fd25f1285f2ffbfd521d
    • Linux Linux: 2.6.12; преди 2.6.12; 5.10.273 до 5.10.*; 5.15.224 до 5.15.*; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.113 до 6.12.*; 6.18.56 до 6.18.*; 7.2.10 до 7.2.*; от 7.3 нататък

    История

    • 18 октомври 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-98857: Linux | freedomonline.bg