Количество 50
Количество 50
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
CVE-2026-46243
smb: client: reject userspace cifs.spnego descriptions
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: s ...
GHSA-3mg7-pfmq-9qfv
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
ELSA-2026-23258
ELSA-2026-23258: kernel security update (IMPORTANT)
BDU:2026-07574
Уязвимость функции cifs_get_spnego_key() инструмента cifs.upcall пакета cifs-utils ядра операционных систем Linux, позволяющая нарушителю повысить свои привилегии до уровня root и выполнить произвольный код
ROS-20260608-73-0001
Уязвимость kernel-lt
ELSA-2026-24381
ELSA-2026-24381: kernel security update (IMPORTANT)
SUSE-SU-2026:2992-1
Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:2955-1
Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:2909-1
Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:2421-1
Security update for the Linux Kernel
SUSE-SU-2026:2862-1
Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:2991-1
Security update for the Linux Kernel (Live Patch 54 for SUSE Linux Enterprise 15 SP4)
SUSE-SU-2026:2317-1
Security update for the Linux Kernel
SUSE-SU-2026:2989-1
Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5)
SUSE-SU-2026:2383-1
Security update for the Linux Kernel
SUSE-SU-2026:2937-1
Security update for the Linux Kernel (Live Patch 51 for SUSE Linux Enterprise 15 SP4)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key. | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key. | CVSS3: 7.8 | 0% Низкий | 2 месяца назад |
 | CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key. | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-46243 smb: client: reject userspace cifs.spnego descriptions | CVSS3: 7.8 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: s ... | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
| GHSA-3mg7-pfmq-9qfv In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key. | CVSS3: 7.8 | 0% Низкий | около 2 месяцев назад |
| ELSA-2026-23258 ELSA-2026-23258: kernel security update (IMPORTANT) | около 2 месяцев назад | ||
 | BDU:2026-07574 Уязвимость функции cifs_get_spnego_key() инструмента cifs.upcall пакета cifs-utils ядра операционных систем Linux, позволяющая нарушителю повысить свои привилегии до уровня root и выполнить произвольный код | CVSS3: 8.8 | 0% Низкий | 2 месяца назад |
 | ROS-20260608-73-0001 Уязвимость kernel-lt | CVSS3: 8.8 | 0% Низкий | около 2 месяцев назад |
| ELSA-2026-24381 ELSA-2026-24381: kernel security update (IMPORTANT) | 29 дней назад | ||
 | SUSE-SU-2026:2992-1 Security update for the Linux Kernel (Live Patch 70 for SUSE Linux Enterprise 12 SP5) | 13 дней назад | ||
| SUSE-SU-2026:2955-1 Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5) | 13 дней назад | ||
| SUSE-SU-2026:2909-1 Security update for the Linux Kernel (Live Patch 72 for SUSE Linux Enterprise 12 SP5) | 14 дней назад | ||
| SUSE-SU-2026:2421-1 Security update for the Linux Kernel | около 1 месяца назад | ||
| SUSE-SU-2026:2862-1 Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 15 SP7) | 16 дней назад | ||
| SUSE-SU-2026:2991-1 Security update for the Linux Kernel (Live Patch 54 for SUSE Linux Enterprise 15 SP4) | 13 дней назад | ||
| SUSE-SU-2026:2317-1 Security update for the Linux Kernel | около 2 месяцев назад | ||
| SUSE-SU-2026:2989-1 Security update for the Linux Kernel (Live Patch 40 for SUSE Linux Enterprise 15 SP5) | 13 дней назад | ||
| SUSE-SU-2026:2383-1 Security update for the Linux Kernel | около 2 месяцев назад | ||
| SUSE-SU-2026:2937-1 Security update for the Linux Kernel (Live Patch 51 for SUSE Linux Enterprise 15 SP4) | 14 дней назад |
Уязвимостей на страницу