Количество 17
Количество 17
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
CVE-2026-46243
smb: client: reject userspace cifs.spnego descriptions
CVE-2026-46243
In the Linux kernel, the following vulnerability has been resolved: s ...
GHSA-3mg7-pfmq-9qfv
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
ELSA-2026-23258
ELSA-2026-23258: kernel security update (IMPORTANT)
BDU:2026-07574
Уязвимость функции cifs_get_spnego_key() инструмента cifs.upcall пакета cifs-utils ядра операционных систем Linux, позволяющая нарушителю повысить свои привилегии до уровня root и выполнить произвольный код
ROS-20260608-73-0001
Уязвимость kernel-lt
ELSA-2026-24381
ELSA-2026-24381: kernel security update (IMPORTANT)
SUSE-SU-2026:2421-1
Security update for the Linux Kernel
SUSE-SU-2026:2317-1
Security update for the Linux Kernel
SUSE-SU-2026:2383-1
Security update for the Linux Kernel
SUSE-SU-2026:2310-1
Security update for the Linux Kernel
openSUSE-SU-2026:20912-1
Security update for the Linux Kernel
SUSE-SU-2026:2482-1
Security update for the Linux Kernel
ELSA-2026-50372
ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key. | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key. | CVSS3: 7.8 | 0% Низкий | 2 месяца назад |
 | CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key. | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
 | CVE-2026-46243 smb: client: reject userspace cifs.spnego descriptions | CVSS3: 7.8 | 0% Низкий | около 2 месяцев назад |
| CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: s ... | CVSS3: 7.1 | 0% Низкий | около 2 месяцев назад |
| GHSA-3mg7-pfmq-9qfv In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key. | CVSS3: 7.8 | 0% Низкий | около 2 месяцев назад |
| ELSA-2026-23258 ELSA-2026-23258: kernel security update (IMPORTANT) | около 2 месяцев назад | ||
 | BDU:2026-07574 Уязвимость функции cifs_get_spnego_key() инструмента cifs.upcall пакета cifs-utils ядра операционных систем Linux, позволяющая нарушителю повысить свои привилегии до уровня root и выполнить произвольный код | CVSS3: 8.8 | 0% Низкий | 2 месяца назад |
 | ROS-20260608-73-0001 Уязвимость kernel-lt | CVSS3: 8.8 | 0% Низкий | около 2 месяцев назад |
| ELSA-2026-24381 ELSA-2026-24381: kernel security update (IMPORTANT) | 28 дней назад | ||
 | SUSE-SU-2026:2421-1 Security update for the Linux Kernel | около 1 месяца назад | ||
| SUSE-SU-2026:2317-1 Security update for the Linux Kernel | около 2 месяцев назад | ||
| SUSE-SU-2026:2383-1 Security update for the Linux Kernel | около 2 месяцев назад | ||
| SUSE-SU-2026:2310-1 Security update for the Linux Kernel | около 2 месяцев назад | ||
| openSUSE-SU-2026:20912-1 Security update for the Linux Kernel | около 2 месяцев назад | ||
| SUSE-SU-2026:2482-1 Security update for the Linux Kernel | около 1 месяца назад | ||
| ELSA-2026-50372 ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 25 дней назад |
Уязвимостей на страницу