Количество 24
Количество 24
CVE-2026-31657
In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadv_bla_add_claim() can replace claim->backbone_gw and drop the old gateway's last reference while readers still follow the pointer. The netlink claim dump path dereferences claim->backbone_gw->orig and takes claim->backbone_gw->crc_lock without pinning the underlying backbone gateway. batadv_bla_check_claim() still has the same naked pointer access pattern. Reuse batadv_bla_claim_get_backbone_gw() in both readers so they operate on a stable gateway reference until the read-side work is complete. This keeps the dump and claim-check paths aligned with the lifetime rules introduced for the other BLA claim readers.
CVE-2026-31657
In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadv_bla_add_claim() can replace claim->backbone_gw and drop the old gateway's last reference while readers still follow the pointer. The netlink claim dump path dereferences claim->backbone_gw->orig and takes claim->backbone_gw->crc_lock without pinning the underlying backbone gateway. batadv_bla_check_claim() still has the same naked pointer access pattern. Reuse batadv_bla_claim_get_backbone_gw() in both readers so they operate on a stable gateway reference until the read-side work is complete. This keeps the dump and claim-check paths aligned with the lifetime rules introduced for the other BLA claim readers.
CVE-2026-31657
In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadv_bla_add_claim() can replace claim->backbone_gw and drop the old gateway's last reference while readers still follow the pointer. The netlink claim dump path dereferences claim->backbone_gw->orig and takes claim->backbone_gw->crc_lock without pinning the underlying backbone gateway. batadv_bla_check_claim() still has the same naked pointer access pattern. Reuse batadv_bla_claim_get_backbone_gw() in both readers so they operate on a stable gateway reference until the read-side work is complete. This keeps the dump and claim-check paths aligned with the lifetime rules introduced for the other BLA claim readers.
CVE-2026-31657
batman-adv: hold claim backbone gateways by reference
CVE-2026-31657
In the Linux kernel, the following vulnerability has been resolved: b ...
GHSA-w24x-3wrx-8q34
In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadv_bla_add_claim() can replace claim->backbone_gw and drop the old gateway's last reference while readers still follow the pointer. The netlink claim dump path dereferences claim->backbone_gw->orig and takes claim->backbone_gw->crc_lock without pinning the underlying backbone gateway. batadv_bla_check_claim() still has the same naked pointer access pattern. Reuse batadv_bla_claim_get_backbone_gw() in both readers so they operate on a stable gateway reference until the read-side work is complete. This keeps the dump and claim-check paths aligned with the lifetime rules introduced for the other BLA claim readers.
BDU:2026-10733
Уязвимость функций batadv_bla_claim_dump_entry() и batadv_bla_backbone_dump() модуля net/batman-adv/bridge_loop_avoidance.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20260918-80-0050
Уязвимость kernel-lt
ROS-20260918-73-0046
Уязвимость kernel-lt
ELSA-2026-50318
ELSA-2026-50318: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2026-50373
ELSA-2026-50373: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2026-50374
ELSA-2026-50374: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2026-50319
ELSA-2026-50319: Unbreakable Enterprise kernel security update (IMPORTANT)
ALT-PU-2026-7357
ALT-PU-2026-7357: package `kernel-image-un-def` update to version 6.1.169-alt1
ALT-PU-2026-6463
ALT-PU-2026-6463: package `kernel-image-6.18` update to version 6.18.23-alt1
SUSE-SU-2026:3166-1
Security update for the Linux Kernel
SUSE-SU-2026:3130-1
Security update for the Linux Kernel
ALT-PU-2026-7584
ALT-PU-2026-7584: package `kernel-image-rpi-un` update to version 6.12.86-alt1
ELSA-2026-50372
ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)
openSUSE-SU-2026:21555-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-31657 In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadv_bla_add_claim() can replace claim->backbone_gw and drop the old gateway's last reference while readers still follow the pointer. The netlink claim dump path dereferences claim->backbone_gw->orig and takes claim->backbone_gw->crc_lock without pinning the underlying backbone gateway. batadv_bla_check_claim() still has the same naked pointer access pattern. Reuse batadv_bla_claim_get_backbone_gw() in both readers so they operate on a stable gateway reference until the read-side work is complete. This keeps the dump and claim-check paths aligned with the lifetime rules introduced for the other BLA claim readers. | CVSS3: 9.8 | 0% Низкий | 6 месяцев назад | |
CVE-2026-31657 In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadv_bla_add_claim() can replace claim->backbone_gw and drop the old gateway's last reference while readers still follow the pointer. The netlink claim dump path dereferences claim->backbone_gw->orig and takes claim->backbone_gw->crc_lock without pinning the underlying backbone gateway. batadv_bla_check_claim() still has the same naked pointer access pattern. Reuse batadv_bla_claim_get_backbone_gw() in both readers so they operate on a stable gateway reference until the read-side work is complete. This keeps the dump and claim-check paths aligned with the lifetime rules introduced for the other BLA claim readers. | 0% Низкий | 6 месяцев назад | ||
CVE-2026-31657 In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadv_bla_add_claim() can replace claim->backbone_gw and drop the old gateway's last reference while readers still follow the pointer. The netlink claim dump path dereferences claim->backbone_gw->orig and takes claim->backbone_gw->crc_lock without pinning the underlying backbone gateway. batadv_bla_check_claim() still has the same naked pointer access pattern. Reuse batadv_bla_claim_get_backbone_gw() in both readers so they operate on a stable gateway reference until the read-side work is complete. This keeps the dump and claim-check paths aligned with the lifetime rules introduced for the other BLA claim readers. | CVSS3: 9.8 | 0% Низкий | 6 месяцев назад | |
CVE-2026-31657 batman-adv: hold claim backbone gateways by reference | CVSS3: 7.1 | 0% Низкий | 6 месяцев назад | |
CVE-2026-31657 In the Linux kernel, the following vulnerability has been resolved: b ... | CVSS3: 9.8 | 0% Низкий | 6 месяцев назад | |
GHSA-w24x-3wrx-8q34 In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadv_bla_add_claim() can replace claim->backbone_gw and drop the old gateway's last reference while readers still follow the pointer. The netlink claim dump path dereferences claim->backbone_gw->orig and takes claim->backbone_gw->crc_lock without pinning the underlying backbone gateway. batadv_bla_check_claim() still has the same naked pointer access pattern. Reuse batadv_bla_claim_get_backbone_gw() in both readers so they operate on a stable gateway reference until the read-side work is complete. This keeps the dump and claim-check paths aligned with the lifetime rules introduced for the other BLA claim readers. | CVSS3: 9.8 | 0% Низкий | 6 месяцев назад | |
BDU:2026-10733 Уязвимость функций batadv_bla_claim_dump_entry() и batadv_bla_backbone_dump() модуля net/batman-adv/bridge_loop_avoidance.c ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 9.8 | 0% Низкий | 7 месяцев назад | |
ROS-20260918-80-0050 Уязвимость kernel-lt | CVSS3: 9.8 | 0% Низкий | около 1 месяца назад | |
ROS-20260918-73-0046 Уязвимость kernel-lt | CVSS3: 9.8 | 0% Низкий | около 1 месяца назад | |
ELSA-2026-50318 ELSA-2026-50318: Unbreakable Enterprise kernel security update (IMPORTANT) | 4 месяца назад | |||
ELSA-2026-50373 ELSA-2026-50373: Unbreakable Enterprise kernel security update (IMPORTANT) | 4 месяца назад | |||
ELSA-2026-50374 ELSA-2026-50374: Unbreakable Enterprise kernel security update (IMPORTANT) | 4 месяца назад | |||
ELSA-2026-50319 ELSA-2026-50319: Unbreakable Enterprise kernel security update (IMPORTANT) | 4 месяца назад | |||
ALT-PU-2026-7357 ALT-PU-2026-7357: package `kernel-image-un-def` update to version 6.1.169-alt1 | CVSS3: 9.8 | 6 месяцев назад | ||
ALT-PU-2026-6463 ALT-PU-2026-6463: package `kernel-image-6.18` update to version 6.18.23-alt1 | CVSS3: 9.8 | 6 месяцев назад | ||
SUSE-SU-2026:3166-1 Security update for the Linux Kernel | 3 месяца назад | |||
SUSE-SU-2026:3130-1 Security update for the Linux Kernel | 3 месяца назад | |||
ALT-PU-2026-7584 ALT-PU-2026-7584: package `kernel-image-rpi-un` update to version 6.12.86-alt1 | CVSS3: 9.8 | 6 месяцев назад | ||
ELSA-2026-50372 ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 4 месяца назад | |||
openSUSE-SU-2026:21555-1 Security update for the Linux Kernel | 3 месяца назад |
Уязвимостей на страницу