Поиск уязвимостей
Количество 12
Количество 12
CVE-2026-64255
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA session handlers use ffs(ba_data->sta_mask) - 1 to derive a station ID without checking that sta_mask is non-zero. When sta_mask is zero, ffs() returns 0 and the subtraction wraps to 0xFFFFFFFF, causing an out-of-bounds access on fw_id_to_link_sta[]. Add WARN_ON_ONCE(!ba_data->sta_mask) guards before each ffs() call, consistent with the existing check in iwl_mld_ampdu_rx_start().
CVE-2026-64255
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA session handlers use ffs(ba_data->sta_mask) - 1 to derive a station ID without checking that sta_mask is non-zero. When sta_mask is zero, ffs() returns 0 and the subtraction wraps to 0xFFFFFFFF, causing an out-of-bounds access on fw_id_to_link_sta[]. Add WARN_ON_ONCE(!ba_data->sta_mask) guards before each ffs() call, consistent with the existing check in iwl_mld_ampdu_rx_start().
CVE-2026-64255
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA session handlers use ffs(ba_data->sta_mask) - 1 to derive a station ID without checking that sta_mask is non-zero. When sta_mask is zero, ffs() returns 0 and the subtraction wraps to 0xFFFFFFFF, causing an out-of-bounds access on fw_id_to_link_sta[]. Add WARN_ON_ONCE(!ba_data->sta_mask) guards before each ffs() call, consistent with the existing check in iwl_mld_ampdu_rx_start().
CVE-2026-64255
wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers
CVE-2026-64255
In the Linux kernel, the following vulnerability has been resolved: w ...
GHSA-3prq-7cqf-r4ww
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA session handlers use ffs(ba_data->sta_mask) - 1 to derive a station ID without checking that sta_mask is non-zero. When sta_mask is zero, ffs() returns 0 and the subtraction wraps to 0xFFFFFFFF, causing an out-of-bounds access on fw_id_to_link_sta[]. Add WARN_ON_ONCE(!ba_data->sta_mask) guards before each ffs() call, consistent with the existing check in iwl_mld_ampdu_rx_start().
RLSA-2026:65334
Important: kernel security, bug fix, and enhancement update
ELSA-2026-65334-0
ELSA-2026-65334-0: kernel security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:67150
Important: kernel security, bug fix, and enhancement update
ELSA-2026-67150-0
ELSA-2026-67150-0: kernel security, bug fix, and enhancement update (IMPORTANT)
ALT-PU-2026-12207
ALT-PU-2026-12207: package `kernel-image-for-vm` update to version 6.18.38-alt1
ALT-PU-2026-11606
ALT-PU-2026-11606: package `kernel-image-6.18` update to version 6.18.40-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-64255 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA session handlers use ffs(ba_data->sta_mask) - 1 to derive a station ID without checking that sta_mask is non-zero. When sta_mask is zero, ffs() returns 0 and the subtraction wraps to 0xFFFFFFFF, causing an out-of-bounds access on fw_id_to_link_sta[]. Add WARN_ON_ONCE(!ba_data->sta_mask) guards before each ffs() call, consistent with the existing check in iwl_mld_ampdu_rx_start(). | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
 | CVE-2026-64255 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA session handlers use ffs(ba_data->sta_mask) - 1 to derive a station ID without checking that sta_mask is non-zero. When sta_mask is zero, ffs() returns 0 and the subtraction wraps to 0xFFFFFFFF, causing an out-of-bounds access on fw_id_to_link_sta[]. Add WARN_ON_ONCE(!ba_data->sta_mask) guards before each ffs() call, consistent with the existing check in iwl_mld_ampdu_rx_start(). | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-64255 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA session handlers use ffs(ba_data->sta_mask) - 1 to derive a station ID without checking that sta_mask is non-zero. When sta_mask is zero, ffs() returns 0 and the subtraction wraps to 0xFFFFFFFF, causing an out-of-bounds access on fw_id_to_link_sta[]. Add WARN_ON_ONCE(!ba_data->sta_mask) guards before each ffs() call, consistent with the existing check in iwl_mld_ampdu_rx_start(). | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
 | CVE-2026-64255 wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers | CVSS3: 7.1 | 0% Низкий | 4 месяца назад |
| CVE-2026-64255 In the Linux kernel, the following vulnerability has been resolved: w ... | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
| GHSA-3prq-7cqf-r4ww In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate sta_mask before ffs() in BA session handlers Three BA session handlers use ffs(ba_data->sta_mask) - 1 to derive a station ID without checking that sta_mask is non-zero. When sta_mask is zero, ffs() returns 0 and the subtraction wraps to 0xFFFFFFFF, causing an out-of-bounds access on fw_id_to_link_sta[]. Add WARN_ON_ONCE(!ba_data->sta_mask) guards before each ffs() call, consistent with the existing check in iwl_mld_ampdu_rx_start(). | CVSS3: 8.8 | 0% Низкий | 4 месяца назад |
 | RLSA-2026:65334 Important: kernel security, bug fix, and enhancement update | около 2 месяцев назад | ||
| ELSA-2026-65334-0 ELSA-2026-65334-0: kernel security, bug fix, and enhancement update (IMPORTANT) | около 2 месяцев назад | ||
| RLSA-2026:67150 Important: kernel security, bug fix, and enhancement update | около 2 месяцев назад | ||
| ELSA-2026-67150-0 ELSA-2026-67150-0: kernel security, bug fix, and enhancement update (IMPORTANT) | около 2 месяцев назад | ||
| ALT-PU-2026-12207 ALT-PU-2026-12207: package `kernel-image-for-vm` update to version 6.18.38-alt1 | CVSS3: 10 | 4 месяца назад | |
| ALT-PU-2026-11606 ALT-PU-2026-11606: package `kernel-image-6.18` update to version 6.18.40-alt1 | CVSS3: 10 | 3 месяца назад |
Уязвимостей на страницу