Количество 36
Количество 36
CVE-2026-52993
In the Linux kernel, the following vulnerability has been resolved: t ...
GHSA-vj88-ppr4-hj46
In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit). When a device-mapper target has a sufficiently large ti->len with a small region_size, the division result can exceed UINT_MAX. The truncated value is then used to calculate bitset_size, causing clean_bits, sync_bits, and recovering_bits to be allocated far smaller than needed for the actual number of regions. Subsequent log operations (log_set_bit, log_clear_bit, log_test_bit) use region indices derived from the full untruncated region space, causing out-of-bounds writes to kernel heap memory allocated by vmalloc. This can be reproduced by creating a mirror target whose region_count overflows 32 bits: dmsetup create bigzero --table '0 8589934594 zero' dmsetup create mymirror --table '0 8589934594 mirror \...
GHSA-m86q-cgj9-94c8
In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate the skb it is validating, freeing the old one. In tipc_buf_append(), it was being called with a pointer to a local variable which was a copy of the caller's skb pointer. If the skb was reallocated and validation subsequently failed, the error handling path would free the original skb pointer, which had already been freed, leading to double-free. Fix this by checking if head now points to a newly allocated reassembled skb. If it does, reassign *headbuf for later freeing operations.
RLSA-2026:47017
Important: kernel security, bug fix, and enhancement update
ELSA-2026-47017
ELSA-2026-47017: kernel security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:45114
Important: kernel security update
ELSA-2026-45114
ELSA-2026-45114: kernel security update (IMPORTANT)
ELSA-2025-28040
ELSA-2025-28040: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2025-28049
ELSA-2025-28049: Unbreakable Enterprise kernel security update (IMPORTANT)
ELSA-2025-28048
ELSA-2025-28048: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2026:3044-1
Security update for the Linux Kernel
SUSE-SU-2026:3089-1
Security update for the Linux Kernel
SUSE-SU-2026:3156-1
Security update for the Linux Kernel
openSUSE-SU-2026:21388-1
Security update for the Linux Kernel
SUSE-SU-2026:3166-1
Security update for the Linux Kernel
SUSE-SU-2026:3130-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-52993 In the Linux kernel, the following vulnerability has been resolved: t ... | CVSS3: 9.8 | 0% Низкий | около 1 месяца назад | |
GHSA-vj88-ppr4-hj46 In the Linux kernel, the following vulnerability has been resolved: dm log: fix out-of-bounds write due to region_count overflow The local variable region_count in create_log_context() is declared as unsigned int (32-bit), but dm_sector_div_up() returns sector_t (64-bit). When a device-mapper target has a sufficiently large ti->len with a small region_size, the division result can exceed UINT_MAX. The truncated value is then used to calculate bitset_size, causing clean_bits, sync_bits, and recovering_bits to be allocated far smaller than needed for the actual number of regions. Subsequent log operations (log_set_bit, log_clear_bit, log_test_bit) use region indices derived from the full untruncated region space, causing out-of-bounds writes to kernel heap memory allocated by vmalloc. This can be reproduced by creating a mirror target whose region_count overflows 32 bits: dmsetup create bigzero --table '0 8589934594 zero' dmsetup create mymirror --table '0 8589934594 mirror \... | CVSS3: 7 | 0% Низкий | около 1 месяца назад | |
GHSA-m86q-cgj9-94c8 In the Linux kernel, the following vulnerability has been resolved: tipc: fix double-free in tipc_buf_append() tipc_msg_validate() can potentially reallocate the skb it is validating, freeing the old one. In tipc_buf_append(), it was being called with a pointer to a local variable which was a copy of the caller's skb pointer. If the skb was reallocated and validation subsequently failed, the error handling path would free the original skb pointer, which had already been freed, leading to double-free. Fix this by checking if head now points to a newly allocated reassembled skb. If it does, reassign *headbuf for later freeing operations. | CVSS3: 9.8 | 0% Низкий | около 1 месяца назад | |
RLSA-2026:47017 Important: kernel security, bug fix, and enhancement update | 5 дней назад | |||
ELSA-2026-47017 ELSA-2026-47017: kernel security, bug fix, and enhancement update (IMPORTANT) | 5 дней назад | |||
RLSA-2026:45114 Important: kernel security update | 7 дней назад | |||
ELSA-2026-45114 ELSA-2026-45114: kernel security update (IMPORTANT) | 6 дней назад | |||
ELSA-2025-28040 ELSA-2025-28040: Unbreakable Enterprise kernel security update (IMPORTANT) | 8 месяцев назад | |||
ELSA-2025-28049 ELSA-2025-28049: Unbreakable Enterprise kernel security update (IMPORTANT) | 8 месяцев назад | |||
ELSA-2025-28048 ELSA-2025-28048: Unbreakable Enterprise kernel security update (IMPORTANT) | 8 месяцев назад | |||
SUSE-SU-2026:3044-1 Security update for the Linux Kernel | 19 дней назад | |||
SUSE-SU-2026:3089-1 Security update for the Linux Kernel | 18 дней назад | |||
SUSE-SU-2026:3156-1 Security update for the Linux Kernel | 13 дней назад | |||
openSUSE-SU-2026:21388-1 Security update for the Linux Kernel | 14 дней назад | |||
SUSE-SU-2026:3166-1 Security update for the Linux Kernel | 13 дней назад | |||
SUSE-SU-2026:3130-1 Security update for the Linux Kernel | 14 дней назад |
Уязвимостей на страницу