CVE-2026-53042— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1211 · Exploitation for StealthAffected Version Matrix 8
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 858ce2f56b5253063f61f6b1c58a6dbf5d71da0b< a28f56988c8e5bb9375806a5cfb0bf54d662ae3f | affected |
858ce2f56b5253063f61f6b1c58a6dbf5d71da0b< 1075f2f590fdac147f8b8010c35b606564b5c7d7 | affected | ||
858ce2f56b5253063f61f6b1c58a6dbf5d71da0b< a55f80233f384dc89ef3425b2e1dd0e6d44bcf29 | affected | ||
6.15 | affected | ||
< 6.15 | unaffected | ||
6.18.33≤ 6.18.* | unaffected | ||
7.0.10≤ 7.0.* | unaffected | ||
7.1≤ * | unaffected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-53042の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: fwctl: Fix class init ordering to avoid NULL pointer dereference on device removal CXL is linked before fwctl in drivers/Makefile. Both use `module_init, so `cxl_pci_driver_init()` runs first. When `cxl_pci_probe()` calls `fwctl_register()` and then `device_add()`, fwctl_class is not yet registered because fwctl_init() hasn't run, causing `class_to_subsys()` to return NULL and skip knode_class initialization. On device removal, `class_to_subsys()` returns non-NULL, and `device_del()` calls `klist_del()` on the uninitialized knode, triggering a NULL pointer dereference.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会开源的操作系统Linux所使用的内核。 Linux kernel 6.15版本存在安全漏洞，该漏洞源于fwctl类初始化顺序问题，导致在设备移除时触发空指针取消引用。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-53042の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-53042のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-53042 补丁与修复 (3)
Same Patch Batch · Linux · 2026-06-24 · 219 CVEs total
| CVE-2026-52982 | 9.8 CRITICAL | net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() |
| CVE-2026-53046 | 9.8 CRITICAL | ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine |
| CVE-2026-52955 | 9.8 CRITICAL | libceph: Fix potential out-of-bounds access in crush_decode() |
| CVE-2026-53045 | 9.8 CRITICAL | memory: tegra124-emc: Fix dll_change check |
| CVE-2026-53049 | 9.8 CRITICAL | gfs2: add some missing log locking |
| CVE-2026-53010 | 9.8 CRITICAL | ksmbd: fix use-after-free in smb2_open during durable reconnect |
| CVE-2026-53088 | 9.8 CRITICAL | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb |
| CVE-2026-53006 | 9.8 CRITICAL | ipv6: fix possible UAF in icmpv6_rcv() |
| CVE-2026-53055 | 9.8 CRITICAL | crypto: hisilicon/sec2 - prevent req used-after-free for sec |
| CVE-2026-53002 | 9.8 CRITICAL | netfilter: conntrack: remove sprintf usage |
| CVE-2026-53086 | 9.8 CRITICAL | net: bcmgenet: fix racing timeout handler |
| CVE-2026-52914 | 9.8 CRITICAL | batman-adv: fix fragment reassembly length accounting |
| CVE-2026-52993 | 9.8 CRITICAL | tipc: fix double-free in tipc_buf_append() |
| CVE-2026-52931 | 9.8 CRITICAL | batman-adv: tp_meter: avoid use of uninit sender vars |
| CVE-2026-52989 | 9.8 CRITICAL | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers |
| CVE-2026-52924 | 9.8 CRITICAL | sctp: purge outqueue on stale COOKIE-ECHO handling |
| CVE-2026-52986 | 9.8 CRITICAL | netfilter: nf_conntrack_sip: don't use simple_strtoul |
| CVE-2026-52999 | 9.1 CRITICAL | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching |
| CVE-2026-52958 | 9.1 CRITICAL | libceph: Fix potential out-of-bounds access in osdmap_decode() |
| CVE-2026-53043 | 9.1 CRITICAL | ocfs2/dlm: validate qr_numregions in dlm_match_regions() |
Showing 20 of 219 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-53358
Bluetooth: L2CAP: use chan timer to close channels in cleanu - CVE-2026-53357
Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_c - CVE-2026-53356
drm/i915/gem: Fix phys BO pread/pwrite with offset - CVE-2026-53355
net: rds: clear i_sends on setup unwind - CVE-2026-53354
arm64: errata: Mitigate TLBI errata on various Arm CPUs
同じベンダー: Linux
- CVE-2026-53358
Bluetooth: L2CAP: use chan timer to close channels in cleanu - CVE-2026-53357
Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_c - CVE-2026-53356
drm/i915/gem: Fix phys BO pread/pwrite with offset - CVE-2026-53355
net: rds: clear i_sends on setup unwind - CVE-2026-53354
arm64: errata: Mitigate TLBI errata on various Arm CPUs
V. CVE-2026-53042へのコメント
まだコメントはありません