CVE-2026-46281— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1203 · Exploitation for Client ExecutionAffected Version Matrix 8
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 4c5d3365882dbbc0784688784904f440d7a4c0f1< e9b057a44deff4c59c13f44672a5cc74dcd57522 | affected |
4c5d3365882dbbc0784688784904f440d7a4c0f1< b281adf71f786c325eb6d6d1582d4d05313438a8 | affected | ||
4c5d3365882dbbc0784688784904f440d7a4c0f1< 82d1f01292d3f09bf063f829f8ab8de12b4280a1 | affected | ||
6.18 | affected | ||
< 6.18 | unaffected | ||
6.18.27≤ 6.18.* | unaffected | ||
7.0.4≤ 7.0.* | unaffected | ||
7.1≤ * | unaffected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-46281の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
vmalloc: fix buffer overflow in vrealloc_node_align()
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_align() Commit 4c5d3365882d ("mm/vmalloc: allow to set node and align in vrealloc") added the ability to force a new allocation if the current pointer is on the wrong NUMA node, or if an alignment constraint is not met, even if the user is shrinking the allocation. On this path (need_realloc), the code allocates a new object of 'size' bytes and then memcpy()s 'old_size' bytes into it. If the request is to shrink the object (size < old_size), this results in an out-of-bounds write on the new buffer. Fix this by bounding the copy length by the new allocation size.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于vrealloc_node_align函数中缓冲区溢出，可能导致内存损坏。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-46281の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-46281のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-46281 补丁与修复 (3)
Same Patch Batch · Linux · 2026-06-08 · 41 CVEs total
| CVE-2026-46289 | 9.8 CRITICAL | lib/scatterlist: fix length calculations in extract_kvec_to_sg |
| CVE-2026-46288 | 8.4 HIGH | of: unittest: fix use-after-free in of_unittest_changeset() |
| CVE-2026-46307 | 8.3 HIGH | wifi: ath5k: do not access array OOB |
| CVE-2026-46303 | 8.2 HIGH | isofs: validate Rock Ridge CE continuation extent against volume size |
| CVE-2026-46275 | 7.8 HIGH | Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths |
| CVE-2026-46277 | 7.8 HIGH | mm/zone_device: do not touch device folio after calling ->folio_free() |
| CVE-2026-46311 | 7.8 HIGH | drm/amdgpu/userq: fix access to stale wptr mapping |
| CVE-2026-46274 | 7.8 HIGH | io-wq: check that the predecessor is hashed in io_wq_remove_pending() |
| CVE-2026-46280 | 7.8 HIGH | lib: test_hmm: evict device pages on file close to avoid use-after-free |
| CVE-2026-46306 | 7.5 HIGH | flow_dissector: do not dissect PPPoE PFC frames |
| CVE-2026-46304 | 7.5 HIGH | nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free |
| CVE-2026-46299 | 7.0 HIGH | hfsplus: fix held lock freed on hfsplus_fill_super() |
| CVE-2025-71315 | drm/vkms: Convert to DRM's vblank timer | |
| CVE-2026-46287 | net: txgbe: fix RTNL assertion warning when remove module | |
| CVE-2026-46286 | leds: qcom-lpg: Check for array overflow when selecting the high resolution | |
| CVE-2026-46285 | mtd: docg3: fix use-after-free in docg3_release() | |
| CVE-2026-46284 | mm/hugetlb: fix early boot crash on parameters without '=' separator | |
| CVE-2026-46283 | tpm: Use kfree_sensitive() to free auth session in tpm_dev_release() | |
| CVE-2026-46282 | iio: frequency: admv1013: fix NULL pointer dereference on str | |
| CVE-2026-46279 | mm/alloc_tag: clear codetag for pages allocated before page_ext initialization |
Showing 20 of 41 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-52910
bpf: Free reuseport cBPF prog after RCU grace period. - CVE-2026-52909
ip6_vti: set netns_immutable on the fallback device. - CVE-2026-52908
RDMA: During rereg_mr ensure that REREG_ACCESS is compatible - CVE-2026-46331
net/sched: fix pedit partial COW leading to page cache corru - CVE-2026-52907
media: rockchip: rkcif: fix off by one bugs
同じベンダー: Linux
- CVE-2026-52910
bpf: Free reuseport cBPF prog after RCU grace period. - CVE-2026-52909
ip6_vti: set netns_immutable on the fallback device. - CVE-2026-52908
RDMA: During rereg_mr ensure that REREG_ACCESS is compatible - CVE-2026-46331
net/sched: fix pedit partial COW leading to page cache corru - CVE-2026-52907
media: rockchip: rkcif: fix off by one bugs
V. CVE-2026-46281へのコメント
まだコメントはありません