CVE-2026-45999— Linux kernel 安全漏洞
Possible ATT&CK Techniques 2AI
T1203 · Exploitation for Client Execution T1059 · Command and Scripting InterpreterAffected Version Matrix 16
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 598162d050801e556750defff4ddab499e5d76ed< 778acd52e9497806fbd2cea7f770c41d6850fc48 | affected |
598162d050801e556750defff4ddab499e5d76ed< 118ff71ff09ebaf323a09af9e911517321a299f4 | affected | ||
598162d050801e556750defff4ddab499e5d76ed< 43a878639b90e9721ffa5eb616a7e6d8454adef3 | affected | ||
598162d050801e556750defff4ddab499e5d76ed< f1374fa6e57fd836623668d782ded9244cfd2938 | affected | ||
598162d050801e556750defff4ddab499e5d76ed< c9ce18e6bb2c467ec85756dc7989b547b7584fee | affected | ||
598162d050801e556750defff4ddab499e5d76ed< bbbbb3f0d7864238a8da2a94cd6ec013fee06a2e | affected | ||
598162d050801e556750defff4ddab499e5d76ed< 21e161de2dc660b1bb70ef5b156ab8e6e1cca3ab | affected | ||
5.13 | affected | ||
| … +8 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-45999の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() Some crafted images can have illegal (!partial_decoding && m_llen < m_plen) extents, and the LZ4 inplace decompression path can be wrongly hit, but it cannot handle (outpages < inpages) properly: "outpages - inpages" wraps to a large value and the subsequent rq->out[] access reads past the decompressed_pages array. However, such crafted cases can correctly result in a corruption report in the normal LZ4 non-inplace path. Let's add an additional check to fix this for backporting. Reproducible image (base64-encoded gzipped blob): H4sIAJGR12kCA+3SPUoDQRgG4MkmkkZk8QRbRFIIi9hbpEjrHQI5ghfwCN5BLCzTGtLbBI+g dilSJo1CnIm7GEXFxhT6PDDwfrs73/ywIQD/1ePD4r7Ou6ETsrq4mu7XcWfj++Pb58nJU/9i PNtbjhan04/9GtX4qVYc814WDqt6FaX5s+ZwXXeq52lndT6IuVvlblytLMvh4Gzwaf90nsvz 2DF/21+20T/ldgp5s1jXRaN4t/8izsy/OUB6e/Qa79r+JwAAAAAAAL52vQVuGQAAAP6+my1w ywAAAAAAAADwu14ATsEYtgBQAAA= $ mount -t erofs -o cache_strategy=disabled foo.erofs /mnt $ dd if=/mnt/data of=/dev/null bs=4096 count=1
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于erofs中z_erofs_lz4_handle_overlap函数存在无符号下溢，可能导致越界读取。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-45999の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-45999のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-45999 补丁与修复 (5)
Same Patch Batch · Linux · 2026-05-27 · 275 CVEs total
| CVE-2026-45972 | 9.8 CRITICAL | smb: client: fix potential UAF and double free in smb2_open_file() |
| CVE-2026-46039 | 9.8 CRITICAL | rxgk: Fix potential integer overflow in length check |
| CVE-2026-45988 | 9.8 CRITICAL | rxrpc: Fix re-decryption of RESPONSE packets |
| CVE-2026-45898 | 9.8 CRITICAL | RDMA/iwcm: Fix workqueue list corruption by removing work_list |
| CVE-2026-46043 | 9.1 CRITICAL | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv |
| CVE-2026-46056 | 8.8 HIGH | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers |
| CVE-2026-45945 | 8.8 HIGH | iommu/vt-d: Fix race condition during PASID entry replacement |
| CVE-2026-46037 | 8.2 HIGH | ipv4: icmp: validate reply type before using icmp_pointers |
| CVE-2026-45843 | 8.2 HIGH | slip: bound decode() reads against the compressed packet length |
| CVE-2026-46099 | 8.1 HIGH | net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels |
| CVE-2026-46010 | 8.1 HIGH | rxrpc: Fix error handling in rxgk_extract_token() |
| CVE-2026-46076 | 7.9 HIGH | KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 |
| CVE-2026-45878 | 7.8 HIGH | drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 |
| CVE-2026-45909 | 7.8 HIGH | clk: mediatek: Drop __initconst from gates |
| CVE-2026-46036 | 7.8 HIGH | vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex |
| CVE-2026-45933 | 7.8 HIGH | bpf: Preserve id of register in sync_linked_regs() |
| CVE-2026-46065 | 7.8 HIGH | fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info |
| CVE-2026-46058 | 7.8 HIGH | media: amphion: Fix race between m2m job_abort and device_run |
| CVE-2026-45894 | 7.8 HIGH | iommu/vt-d: Clear Present bit before tearing down PASID entry |
| CVE-2026-46053 | 7.8 HIGH | net: rds: fix MR cleanup on copy error |
Showing 20 of 275 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-52910
bpf: Free reuseport cBPF prog after RCU grace period. - CVE-2026-52909
ip6_vti: set netns_immutable on the fallback device. - CVE-2026-52908
RDMA: During rereg_mr ensure that REREG_ACCESS is compatible - CVE-2026-46331
net/sched: fix pedit partial COW leading to page cache corru - CVE-2026-52907
media: rockchip: rkcif: fix off by one bugs
同じベンダー: Linux
- CVE-2026-52910
bpf: Free reuseport cBPF prog after RCU grace period. - CVE-2026-52909
ip6_vti: set netns_immutable on the fallback device. - CVE-2026-52908
RDMA: During rereg_mr ensure that REREG_ACCESS is compatible - CVE-2026-46331
net/sched: fix pedit partial COW leading to page cache corru - CVE-2026-52907
media: rockchip: rkcif: fix off by one bugs
V. CVE-2026-45999へのコメント
まだコメントはありません