Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-80975

Опубликовано: 14 сент. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.8

Описание

In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnap_mcu_exec() publishes an on-stack buffer to the receive path: unsigned char rx[QNAP_MCU_RX_BUFFER_SIZE]; ... reply->data = rx; reply->length = length; and qnap_mcu_receive_buf() writes into it from the serdev receive path, which runs out of flush_to_ldisc() and is not serialized against qnap_mcu_exec() at all. bus_lock cannot cover it, because qnap_mcu_exec() holds that mutex across wait_for_completion_timeout(). On a timeout qnap_mcu_exec() returns with reply->data still pointing at its own frame. A reply that arrives late, or an unsolicited message from the MCU, is then written into a stack frame that has been left, corrupting whatever runs next on that stack. The same applies when qnap_mcu_write() fails, since that path returns without touching the reply state either. Move the receive buffer into struct qnap_mcu. It is 37 bytes and the structur...

РелизСтатусПримечание
devel

needs-triage

esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

end of kernel support
noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-aws-5.3
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-5.3

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-aws-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-aws-5.15
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-5.15

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-aws-6.2
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-6.2

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-aws-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-5.4

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-aws-5.11
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-5.11

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-aws-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-aws-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-aws-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

fips-preview/jammy

needs-triage

fips-updates/bionic

needs-triage

fips-updates/focal

needs-triage

fips-updates/jammy

needs-triage

fips-updates/noble

needs-triage

fips/bionic

needs-triage

fips/focal

needs-triage

jammy

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/xenial

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

ignored

superseded by linux-azure-5.3
esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-azure-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-azure-5.15
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-5.15

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-azure-6.2
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-6.2

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-azure-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-5.4

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-azure-5.11
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-5.11

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by linux-azure-6.14
resolute

DNE

upstream

ignored

superseded by linux-azure-6.14

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-azure-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-azure-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-azure-5.3
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-5.3

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra/focal

ignored

superseded by linux-azure-fde-5.15
jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-azure-fde-6.2
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-azure-fde-6.2

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

replaced by linux-azure-6.5
noble

DNE

resolute

DNE

upstream

ignored

replaced by linux-azure-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

fips-preview/jammy

needs-triage

fips-updates/bionic

needs-triage

fips-updates/focal

needs-triage

fips-updates/jammy

needs-triage

fips-updates/noble

needs-triage

fips/bionic

needs-triage

fips/focal

needs-triage

jammy

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
bluefield/jammy

needs-triage

bluefield/noble

needs-triage

devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

fips-preview/jammy

needs-triage

fips-updates/bionic

needs-triage

fips-updates/focal

needs-triage

fips-updates/jammy

needs-triage

fips-updates/noble

needs-triage

fips-updates/xenial

needs-triage

fips/bionic

needs-triage

fips/focal

needs-triage

fips/xenial

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

ignored

superseded by linux-gcp-5.3
esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-gcp-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-gcp-5.15
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-5.15

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-gcp-6.2
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-6.2

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-gcp-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-5.4

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-gcp-5.11
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-5.11

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by linux-gcp-6.14
resolute

DNE

upstream

ignored

superseded by linux-gcp-6.14

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-gcp-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-gcp-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gcp-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

fips-preview/jammy

needs-triage

fips-updates/bionic

needs-triage

fips-updates/focal

needs-triage

fips-updates/jammy

needs-triage

fips-updates/noble

needs-triage

fips/bionic

needs-triage

fips/focal

needs-triage

jammy

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

end of kernel support
jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-gke-5.0
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-gke-5.0

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

end of kernel support
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

end of kernel support
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

end of kernel support
jammy

needs-triage

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

end of kernel support
jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

end of kernel support
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

ignored

replaced by linux-hwe-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-hwe-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-hwe-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-hwe-5.15
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-hwe-5.15

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-hwe-6.2
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-hwe-6.2

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-hwe-5.11
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-hwe-5.11

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by linux-hwe-6.14
resolute

DNE

upstream

ignored

superseded by linux-hwe-6.14

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-hwe-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-hwe-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-hwe-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-hwe-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/xenial

ignored

superseded by linux-hwe
esm-infra/bionic

ignored

superseded by linux-hwe-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

end of kernel support
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by Ubuntu Pro ppa version
noble

DNE

realtime/jammy

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-lowlatency-hwe-6.2
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-lowlatency-hwe-6.2

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

replaced by linux-hwe-6.14
resolute

DNE

upstream

ignored

replaced by linux-hwe-6.14

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-lowlatency-hwe-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-lowlatency-hwe-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-lowlatency-hwe-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-lowlatency-hwe-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

end of kernel support
resolute

DNE

upstream

ignored

end of kernel support

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-nvidia-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-nvidia-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-nvidia-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-nvidia-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

DNE

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

replaced by linux-hwe-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-oem-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-oem-5.14
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-5.14

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

replaced by linux-hwe-5.15
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

replaced by linux-hwe-5.15

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-oem-6.1
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-6.1

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-oem-5.10
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-5.10

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-oem-6.1
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-6.1

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-oem-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by linux-oem-6.14
resolute

DNE

upstream

ignored

superseded by linux-oem-6.14

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-oem-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oem-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by linux-oem-6.14
resolute

DNE

upstream

ignored

superseded by linux-oem-6.14

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

DNE

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-oracle-5.3
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oracle-5.3

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-oracle-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oracle-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-oracle-5.15
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oracle-5.15

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

ignored

superseded by linux-oracle-5.4
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oracle-5.4

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-oracle-5.11
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oracle-5.11

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-oracle-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-oracle-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra/focal

needs-triage

jammy

needs-triage

noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/bionic

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by Ubuntu Pro ppa version
realtime/noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

replaced by linux-raspi
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

replaced by linux-raspi

Показывать по

РелизСтатусПримечание
devel

needs-triage

jammy

ignored

superseded by Ubuntu Pro ppa version
noble

ignored

superseded by Ubuntu Pro ppa version
realtime/jammy

needs-triage

realtime/noble

needs-triage

resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

DNE

realtime/noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

DNE

realtime/noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

DNE

realtime/jammy

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

needs-triage

esm-infra/focal

ignored

superseded by linux-riscv-5.8
jammy

ignored

end of kernel support
noble

ignored

replaced by linux-riscv-6.14
resolute

needs-triage

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-riscv-5.13
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-riscv-5.13

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

DNE

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

end of kernel support
noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

ignored

superseded by linux-riscv-5.11
jammy

DNE

noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-riscv-5.11

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

ignored

superseded by linux-riscv-6.17
resolute

DNE

upstream

ignored

superseded by linux-riscv-6.17

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-riscv-6.8
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-riscv-6.8

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

end of kernel support
noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

superseded by linux-starfive-6.5
noble

DNE

resolute

DNE

upstream

ignored

superseded by linux-starfive-6.5

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

ignored

end of kernel support
noble

DNE

resolute

DNE

upstream

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

jammy

DNE

noble

needs-triage

resolute

DNE

upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

needs-triage

jammy

needs-triage

noble

DNE

resolute

DNE

upstream

needs-triage

Показывать по

EPSS

Процентиль: 6%
0.00161
Низкий

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 5.7
redhat
5 дней назад

In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnap_mcu_exec() publishes an on-stack buffer to the receive path: unsigned char rx[QNAP_MCU_RX_BUFFER_SIZE]; ... reply->data = rx; reply->length = length; and qnap_mcu_receive_buf() writes into it from the serdev receive path, which runs out of flush_to_ldisc() and is not serialized against qnap_mcu_exec() at all. bus_lock cannot cover it, because qnap_mcu_exec() holds that mutex across wait_for_completion_timeout(). On a timeout qnap_mcu_exec() returns with reply->data still pointing at its own frame. A reply that arrives late, or an unsolicited message from the MCU, is then written into a stack frame that has been left, corrupting whatever runs next on that stack. The same applies when qnap_mcu_write() fails, since that path returns without touching the reply state either. Move the receive buffer into struct qnap_mcu. It is 37 bytes and the structur...

CVSS3: 7.8
nvd
5 дней назад

In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnap_mcu_exec() publishes an on-stack buffer to the receive path: unsigned char rx[QNAP_MCU_RX_BUFFER_SIZE]; ... reply->data = rx; reply->length = length; and qnap_mcu_receive_buf() writes into it from the serdev receive path, which runs out of flush_to_ldisc() and is not serialized against qnap_mcu_exec() at all. bus_lock cannot cover it, because qnap_mcu_exec() holds that mutex across wait_for_completion_timeout(). On a timeout qnap_mcu_exec() returns with reply->data still pointing at its own frame. A reply that arrives late, or an unsolicited message from the MCU, is then written into a stack frame that has been left, corrupting whatever runs next on that stack. The same applies when qnap_mcu_write() fails, since that path returns without touching the reply state either. Move the receive buffer into struct qnap_mcu. It is 37 bytes and the s

CVSS3: 7.8
debian
5 дней назад

In the Linux kernel, the following vulnerability has been resolved: m ...

CVSS3: 7.8
github
5 дней назад

In the Linux kernel, the following vulnerability has been resolved: mfd: qnap-mcu: keep the reply buffer alive past a command timeout qnap_mcu_exec() publishes an on-stack buffer to the receive path: unsigned char rx[QNAP_MCU_RX_BUFFER_SIZE]; ... reply->data = rx; reply->length = length; and qnap_mcu_receive_buf() writes into it from the serdev receive path, which runs out of flush_to_ldisc() and is not serialized against qnap_mcu_exec() at all. bus_lock cannot cover it, because qnap_mcu_exec() holds that mutex across wait_for_completion_timeout(). On a timeout qnap_mcu_exec() returns with reply->data still pointing at its own frame. A reply that arrives late, or an unsolicited message from the MCU, is then written into a stack frame that has been left, corrupting whatever runs next on that stack. The same applies when qnap_mcu_write() fails, since that path returns without touching the reply state either. Move the receive buffer into struct qnap_mcu. It is 37 bytes and th...

EPSS

Процентиль: 6%
0.00161
Низкий

7.8 High

CVSS3

Уязвимость CVE-2026-80975