CVE-2026-53303— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 14
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | b6a06cbbb5f7fd03589cff9178314af04c568826< d3ff0c121bbaef026df6248ab7ef6f0b068b0647 | affected |
b6a06cbbb5f7fd03589cff9178314af04c568826< cea15f66b7b68b2c50943a6660e0692c6635e4eb | affected | ||
b6a06cbbb5f7fd03589cff9178314af04c568826< 4b3a1bf4c2ffd4c9595d900ead78c9035894a025 | affected | ||
b6a06cbbb5f7fd03589cff9178314af04c568826< d0e877810baf613b018fd9747440b9d4d9db1428 | affected | ||
b6a06cbbb5f7fd03589cff9178314af04c568826< ea3ab43a1f3cf2c7cecd75c8be1ee99a5e94a92e | affected | ||
b6a06cbbb5f7fd03589cff9178314af04c568826< 5909bedbed38c558bee7cb6758ceedf9bc3a9194 | affected | ||
4.17 | affected | ||
< 4.17 | unaffected | ||
| … +6 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-53303の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show()
ソース: NVD (National Vulnerability Database)
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() In f2fs_sbi_show(), the extension_list, extension_count and hot_ext_count are read without holding sbi->sb_lock. If a concurrent sysfs store modifies the extension list via f2fs_update_extension_list(), the show path may read inconsistent count and array contents, potentially leading to out-of-bounds access or displaying stale data. Fix this by holding sb_lock around the entire extension list read and format operation.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会开源的操作系统Linux所使用的内核。 Linux kernel 4.17版本存在安全漏洞，该漏洞源于在f2fs_sbi_show()中未加sb_lock读取extension_list、extension_count和hot_ext_count，可能导致并发修改时读取不一致的数据，越界访问或显示陈旧数据。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-53303の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-53303のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-53303 补丁与修复 (5)
Same Patch Batch · Linux · 2026-06-26 · 47 CVEs total
| CVE-2026-53309 | 9.8 CRITICAL | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison |
| CVE-2026-53322 | 8.8 HIGH | vfio/pci: Clean up DMABUFs before disabling function |
| CVE-2026-53281 | 8.8 HIGH | iommu/vt-d: Avoid NULL pointer dereference or refcount corruption |
| CVE-2026-53300 | 7.8 HIGH | net: enetc: fix NTMP DMA use-after-free issue |
| CVE-2026-53290 | 7.8 HIGH | drm/xe/eustall: Fix drm_dev_put called before stream disable in close |
| CVE-2026-53284 | 7.5 HIGH | btrfs: only release the dirty pages io tree after successful writes |
| CVE-2026-53293 | drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG | |
| CVE-2026-53324 | net: mana: Use pci_name() for debugfs directory naming | |
| CVE-2026-53283 | iommu/amd: Bounds-check devid in __rlookup_amd_iommu() | |
| CVE-2026-53280 | iommu: Fix NULL group->domain dereference in pci_dev_reset_iommu_done() | |
| CVE-2026-53282 | x86/kexec: Push kjump return address even for non-kjump kexec | |
| CVE-2026-53279 | drm/gma500/oaktrail_lvds: fix hang on init failure | |
| CVE-2026-53292 | net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind | |
| CVE-2026-53291 | ALSA: hda/conexant: Fix missing error check for jack detection | |
| CVE-2026-53289 | ice: fix NULL pointer dereference in ice_reset_all_vfs() | |
| CVE-2026-53294 | mailbox: mailbox-test: don't free the reused channel | |
| CVE-2026-53295 | mailbox: add sanity check for channel array | |
| CVE-2026-53296 | mailbox: mailbox-test: free channels on probe error | |
| CVE-2026-53297 | net: mana: Guard mana_remove against double invocation | |
| CVE-2026-53298 | net: airoha: Move ndesc initialization at end of airoha_qdma_init_rx_queue() |
Showing 20 of 47 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-53362
ipv6: account for fraggap on the paged allocation path - CVE-2026-53361
af_unix: Set gc_in_progress to true in unix_gc(). - CVE-2026-53360
KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use - CVE-2026-53359
KVM: x86: Fix shadow paging use-after-free due to unexpected - CVE-2026-53358
Bluetooth: L2CAP: use chan timer to close channels in cleanu
同じベンダー: Linux
- CVE-2026-53362
ipv6: account for fraggap on the paged allocation path - CVE-2026-53361
af_unix: Set gc_in_progress to true in unix_gc(). - CVE-2026-53360
KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use - CVE-2026-53359
KVM: x86: Fix shadow paging use-after-free due to unexpected - CVE-2026-53358
Bluetooth: L2CAP: use chan timer to close channels in cleanu
V. CVE-2026-53303へのコメント
まだコメントはありません