Количество 13
Количество 13
CVE-2026-74746
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow. KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).
CVE-2026-74746
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow. KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).
CVE-2026-74746
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow. KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).
CVE-2026-74746
netfilter: flowtable: publish GC-visible tuple last
CVE-2026-74746
In the Linux kernel, the following vulnerability has been resolved: n ...
GHSA-4hwc-233g-5mv3
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow. KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.).
RLSA-2026:75747
Important: kernel security, bug fix, and enhancement update
ELSA-2026-75747
ELSA-2026-75747: kernel security, bug fix, and enhancement update (IMPORTANT)
ELSA-2026-76738
ELSA-2026-76738: kernel security, bug fix, and enhancement update (IMPORTANT)
ELSA-2026-76739
ELSA-2026-76739: kernel security, bug fix, and enhancement update (IMPORTANT)
ELSA-2026-500377
ELSA-2026-500377: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2026-500249
ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2026-500374
ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-74746 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow. KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.). | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
 | CVE-2026-74746 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow. KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.). | CVSS3: 7.8 | 1% Низкий | 2 месяца назад |
 | CVE-2026-74746 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow. KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.). | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
 | CVE-2026-74746 netfilter: flowtable: publish GC-visible tuple last | CVSS3: 7.8 | 1% Низкий | 24 дня назад |
| CVE-2026-74746 In the Linux kernel, the following vulnerability has been resolved: n ... | CVSS3: 9.8 | 1% Низкий | 2 месяца назад |
| GHSA-4hwc-233g-5mv3 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish GC-visible tuple last nf_flow_table_iterate() only treats original-direction tuple nodes as owning entries. Publishing the original node first lets GC observe and free a flow while flow_offload_add() is still inserting the reply node. Publish the reply node first and the original node last so GC never sees a partially installed flow. KASAN can trigger slab-use-after-free read and write reports in the flowtable/rhashtable path (rht_deferred_worker, jhash, flow_offload_del, flow_offload_lookup, etc.). | CVSS3: 9.8 | 1% Низкий | около 2 месяцев назад |
 | RLSA-2026:75747 Important: kernel security, bug fix, and enhancement update | 20 дней назад | ||
| ELSA-2026-75747 ELSA-2026-75747: kernel security, bug fix, and enhancement update (IMPORTANT) | 21 день назад | ||
| ELSA-2026-76738 ELSA-2026-76738: kernel security, bug fix, and enhancement update (IMPORTANT) | 18 дней назад | ||
| ELSA-2026-76739 ELSA-2026-76739: kernel security, bug fix, and enhancement update (IMPORTANT) | 15 дней назад | ||
| ELSA-2026-500377 ELSA-2026-500377: Unbreakable Enterprise kernel security update (IMPORTANT) | 19 дней назад | ||
| ELSA-2026-500249 ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | около 2 месяцев назад | ||
| ELSA-2026-500374 ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 19 дней назад |
Уязвимостей на страницу