CVE-2026-45876— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1211 · Exploitation for StealthAffected Version Matrix 8
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | b57180c75c7ebff6613886cb69ef6e283a10358b< c787a235deb33be6eda40beee8f561da5fd8cb8c | affected |
b57180c75c7ebff6613886cb69ef6e283a10358b< a4741114c9622346c4bbb8cc2bbd88153616ffaf | affected | ||
b57180c75c7ebff6613886cb69ef6e283a10358b< 53c998527ffa60f9deda8974a11ad39790684159 | affected | ||
6.13 | affected | ||
< 6.13 | unaffected | ||
6.18.14≤ 6.18.* | unaffected | ||
6.19.4≤ 6.19.* | unaffected | ||
7.0≤ * | unaffected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-45876の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
arm64/gcs: Fix error handling in arch_set_shadow_stack_status()
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: arm64/gcs: Fix error handling in arch_set_shadow_stack_status() alloc_gcs() returns an error-encoded pointer on failure, which comes from do_mmap(), not NULL. The current NULL check fails to detect errors, which could lead to using an invalid GCS address. Use IS_ERR_VALUE() to properly detect errors, consistent with the check in gcs_alloc_thread_stack().
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于arm64 GCS驱动中arch_set_shadow_stack_status()函数使用NULL检查错误指针，未能检测到alloc_gcs()返回的错误编码指针。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-45876の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-45876のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-45876 补丁与修复 (3)
Same Patch Batch · Linux · 2026-05-27 · 275 CVEs total
| CVE-2026-45898 | 9.8 CRITICAL | RDMA/iwcm: Fix workqueue list corruption by removing work_list |
| CVE-2026-46039 | 9.8 CRITICAL | rxgk: Fix potential integer overflow in length check |
| CVE-2026-45972 | 9.8 CRITICAL | smb: client: fix potential UAF and double free in smb2_open_file() |
| CVE-2026-45988 | 9.8 CRITICAL | rxrpc: Fix re-decryption of RESPONSE packets |
| CVE-2026-46043 | 9.1 CRITICAL | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv |
| CVE-2026-45945 | 8.8 HIGH | iommu/vt-d: Fix race condition during PASID entry replacement |
| CVE-2026-46056 | 8.8 HIGH | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers |
| CVE-2026-45843 | 8.2 HIGH | slip: bound decode() reads against the compressed packet length |
| CVE-2026-46037 | 8.2 HIGH | ipv4: icmp: validate reply type before using icmp_pointers |
| CVE-2026-46010 | 8.1 HIGH | rxrpc: Fix error handling in rxgk_extract_token() |
| CVE-2026-46099 | 8.1 HIGH | net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels |
| CVE-2026-46076 | 7.9 HIGH | KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 |
| CVE-2026-45959 | 7.8 HIGH | crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree |
| CVE-2026-45956 | 7.8 HIGH | drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() |
| CVE-2026-45910 | 7.8 HIGH | RDMA/rxe: Fix race condition in QP timer handlers |
| CVE-2026-46093 | 7.8 HIGH | mm/vmalloc: take vmap_purge_lock in shrinker |
| CVE-2026-46053 | 7.8 HIGH | net: rds: fix MR cleanup on copy error |
| CVE-2026-45935 | 7.8 HIGH | fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot |
| CVE-2026-45862 | 7.8 HIGH | iommu/vt-d: Flush cache for PASID table before using it |
| CVE-2026-45894 | 7.8 HIGH | iommu/vt-d: Clear Present bit before tearing down PASID entry |
Showing 20 of 275 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-53277
KVM: arm64: Take the SRCU lock for page table walks in fault - CVE-2026-53276
Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer - CVE-2026-53275
ipv6: mcast: Fix use-after-free when processing MLD queries - CVE-2026-53274
net/smc: fix sleep-inside-lock in __smc_setsockopt() causing - CVE-2026-53273
tee: optee: prevent use-after-free when the client exits bef
同じベンダー: Linux
- CVE-2026-53277
KVM: arm64: Take the SRCU lock for page table walks in fault - CVE-2026-53276
Bluetooth: ISO: Fix a use-after-free of the hci_conn pointer - CVE-2026-53275
ipv6: mcast: Fix use-after-free when processing MLD queries - CVE-2026-53274
net/smc: fix sleep-inside-lock in __smc_setsockopt() causing - CVE-2026-53273
tee: optee: prevent use-after-free when the client exits bef
V. CVE-2026-45876へのコメント
まだコメントはありません