Количество 28
Количество 28
CVE-2026-31678
In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDEV_UNREGISTER already detached the device. Dropping the netdev reference in destroy can race with concurrent readers that still observe vport->dev. Do not release vport->dev in ovs_netdev_tunnel_destroy(). Instead, let vport_netdev_free() drop the reference from the RCU callback, matching the non-tunnel destroy path and avoiding additional synchronization under RTNL.
CVE-2026-31678
In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDEV_UNREGISTER already detached the device. Dropping the netdev reference in destroy can race with concurrent readers that still observe vport->dev. Do not release vport->dev in ovs_netdev_tunnel_destroy(). Instead, let vport_netdev_free() drop the reference from the RCU callback, matching the non-tunnel destroy path and avoiding additional synchronization under RTNL.
CVE-2026-31678
In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDEV_UNREGISTER already detached the device. Dropping the netdev reference in destroy can race with concurrent readers that still observe vport->dev. Do not release vport->dev in ovs_netdev_tunnel_destroy(). Instead, let vport_netdev_free() drop the reference from the RCU callback, matching the non-tunnel destroy path and avoiding additional synchronization under RTNL.
CVE-2026-31678
openvswitch: defer tunnel netdev_put to RCU release
CVE-2026-31678
In the Linux kernel, the following vulnerability has been resolved: o ...
GHSA-x9m6-8j85-qvqg
In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDEV_UNREGISTER already detached the device. Dropping the netdev reference in destroy can race with concurrent readers that still observe vport->dev. Do not release vport->dev in ovs_netdev_tunnel_destroy(). Instead, let vport_netdev_free() drop the reference from the RCU callback, matching the non-tunnel destroy path and avoiding additional synchronization under RTNL.
BDU:2026-12606
Уязвимость функции ovs_netdev_tunnel_destroy() модуля net/openvswitch/vport-netdev.c поддержки маршрутизаторов Open vSwitch ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации
ROS-20260925-80-0023
Уязвимость kernel-lt
ROS-20260925-73-0052
Уязвимость kernel-lt
RLSA-2026:82807
Important: kernel security update
ELSA-2026-82807
ELSA-2026-82807: kernel security update (IMPORTANT)
RLSA-2026:86033
Important: kernel security, bug fix, and enhancement update
RLSA-2026:85321
Important: kernel security, bug fix, and enhancement update
SUSE-SU-2026:2450-1
Security update for the Linux Kernel
SUSE-SU-2026:2591-1
Security update for the Linux Kernel
SUSE-SU-2026:2482-1
Security update for the Linux Kernel
SUSE-SU-2026:3594-1
Security update for the Linux Kernel
openSUSE-SU-2026:20826-1
Security update for the Linux Kernel
ALT-PU-2026-6805
ALT-PU-2026-6805: package `kernel-image-un-def` update to version 6.1.168-alt1
ALT-PU-2026-6793
ALT-PU-2026-6793: package `kernel-image-6.18` update to version 6.18.22-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-31678 In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDEV_UNREGISTER already detached the device. Dropping the netdev reference in destroy can race with concurrent readers that still observe vport->dev. Do not release vport->dev in ovs_netdev_tunnel_destroy(). Instead, let vport_netdev_free() drop the reference from the RCU callback, matching the non-tunnel destroy path and avoiding additional synchronization under RTNL. | CVSS3: 7.8 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-31678 In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDEV_UNREGISTER already detached the device. Dropping the netdev reference in destroy can race with concurrent readers that still observe vport->dev. Do not release vport->dev in ovs_netdev_tunnel_destroy(). Instead, let vport_netdev_free() drop the reference from the RCU callback, matching the non-tunnel destroy path and avoiding additional synchronization under RTNL. | CVSS3: 7.8 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-31678 In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDEV_UNREGISTER already detached the device. Dropping the netdev reference in destroy can race with concurrent readers that still observe vport->dev. Do not release vport->dev in ovs_netdev_tunnel_destroy(). Instead, let vport_netdev_free() drop the reference from the RCU callback, matching the non-tunnel destroy path and avoiding additional synchronization under RTNL. | CVSS3: 7.8 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-31678 openvswitch: defer tunnel netdev_put to RCU release | CVSS3: 5.5 | 0% Низкий | 6 месяцев назад |
| CVE-2026-31678 In the Linux kernel, the following vulnerability has been resolved: o ... | CVSS3: 7.8 | 0% Низкий | 6 месяцев назад |
| GHSA-x9m6-8j85-qvqg In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDEV_UNREGISTER already detached the device. Dropping the netdev reference in destroy can race with concurrent readers that still observe vport->dev. Do not release vport->dev in ovs_netdev_tunnel_destroy(). Instead, let vport_netdev_free() drop the reference from the RCU callback, matching the non-tunnel destroy path and avoiding additional synchronization under RTNL. | CVSS3: 7.8 | 0% Низкий | 6 месяцев назад |
 | BDU:2026-12606 Уязвимость функции ovs_netdev_tunnel_destroy() модуля net/openvswitch/vport-netdev.c поддержки маршрутизаторов Open vSwitch ядра операционной системы Linux, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации | CVSS3: 7.8 | 0% Низкий | 7 месяцев назад |
 | ROS-20260925-80-0023 Уязвимость kernel-lt | CVSS3: 7.8 | 0% Низкий | около 1 месяца назад |
| ROS-20260925-73-0052 Уязвимость kernel-lt | CVSS3: 7.8 | 0% Низкий | около 1 месяца назад |
 | RLSA-2026:82807 Important: kernel security update | 11 дней назад | ||
| ELSA-2026-82807 ELSA-2026-82807: kernel security update (IMPORTANT) | 13 дней назад | ||
| RLSA-2026:86033 Important: kernel security, bug fix, and enhancement update | 5 дней назад | ||
| RLSA-2026:85321 Important: kernel security, bug fix, and enhancement update | 5 дней назад | ||
 | SUSE-SU-2026:2450-1 Security update for the Linux Kernel | 4 месяца назад | ||
| SUSE-SU-2026:2591-1 Security update for the Linux Kernel | 4 месяца назад | ||
| SUSE-SU-2026:2482-1 Security update for the Linux Kernel | 4 месяца назад | ||
| SUSE-SU-2026:3594-1 Security update for the Linux Kernel | 3 месяца назад | ||
| openSUSE-SU-2026:20826-1 Security update for the Linux Kernel | 5 месяцев назад | ||
| ALT-PU-2026-6805 ALT-PU-2026-6805: package `kernel-image-un-def` update to version 6.1.168-alt1 | CVSS3: 9.8 | 6 месяцев назад | |
| ALT-PU-2026-6793 ALT-PU-2026-6793: package `kernel-image-6.18` update to version 6.18.22-alt1 | CVSS3: 9.8 | 6 месяцев назад |
Уязвимостей на страницу