Към съдържанието
Търсене

CVE-2026-99100: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate firmware record lengths The p54 firmware parser accesses component ID and component version records without checking that their lengths cover the fields being read. A malformed record can therefore make the parser read past the record. Validate the component ID and component version record lengths before accessing their data. The descriptor record is also checked against the shortest descriptor length found in the supported firmware images. Reject descriptor values that underflow the RX offset or produce an empty RX range before updating the driver state.

    Засегнати продукти

    • Linux Linux: eff1a59c48e3c6a006eb4fe5f2e405a996f2259d преди 87a9aba92485889d510052e474999a6ec00b888c; eff1a59c48e3c6a006eb4fe5f2e405a996f2259d преди d5c28994b2c1440480fccd0b6c2ce72c23bb9fff; eff1a59c48e3c6a006eb4fe5f2e405a996f2259d преди 9af312d3607c8f9b5166a19cbf40cee351cc3a1d; eff1a59c48e3c6a006eb4fe5f2e405a996f2259d преди dda5245afc3470d70406764e3d9f5508e534920a; eff1a59c48e3c6a006eb4fe5f2e405a996f2259d преди f4c6fcc2ad462ffd76d6e6f909bcd6ae0391f5b7; eff1a59c48e3c6a006eb4fe5f2e405a996f2259d преди f641066b0ddcd1b0cf007c0d04f9c966f6e888ae; eff1a59c48e3c6a006eb4fe5f2e405a996f2259d преди 8c4f962f368d5e17481f3c2c5a43028953e137a5; eff1a59c48e3c6a006eb4fe5f2e405a996f2259d преди db7b86bd97b380ece8fa39cfdd7502a9fd35e56f
    • Linux Linux: 2.6.24; преди 2.6.24; 5.10.273 до 5.10.*; 5.15.224 до 5.15.*; 6.1.191 до 6.1.*; 6.6.161 до 6.6.*; 6.12.115 до 6.12.*; 6.18.59 до 6.18.*; 7.2.13 до 7.2.*; от 7.3 нататък

    История

    • 28 октомври 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-99100: Linux | freedomonline.bg