目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

CVE-2026-64420— Linux kernel 安全漏洞

CVSS 7.0 · High EPSS 0.12% · P2

Affected Version Matrix 18

ベンダープロダクトVersion Rangeステータス
LinuxLinux1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b< 24522713034d521ea4b5f5f36342e2b2f7e73bd6affected
1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b< f7e81dc181d9fe8ab977158042cd193e8cc12091affected
1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b< 257203d83204b192d1265a916b42ca0d499bb117affected
1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b< 729ae27dc2503a7c1f92da1859efb45da03e4fa0affected
1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b< ed2941e5db016a0c600b25f1972620e6e223d9faaffected
1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b< b5f41d5bf08e7b1b14fa0bd640975e6d78dc006daffected
1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b< fc030c5b116f668d4ca86dca63742ddbc98d1665affected
1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b< 8b2c1d41bc36c100b38ce5ee6def246c527eaf8aaffected
… +10 more rows
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2026-64420の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
mfd: cros_ec: Delay dev_set_drvdata() until probe success
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: mfd: cros_ec: Delay dev_set_drvdata() until probe success If ec_device_probe() fails, cros_ec_class_release releases memory for the cros_ec_dev structure. However, because the drvdata was already set, sub-drivers like cros_ec_typec can still retrieve the stale pointer via the platform device. This leads to a use-after-free when cros_ec_typec attempts to access &typec->ec->ec->dev on a device that has already been released. Move dev_set_drvdata() to ensure that the pointer is only made available once all initialization steps have succeeded. sysfs: cannot create duplicate filename '/class/chromeos/cros_ec' Call trace: sysfs_do_create_link_sd+0x94/0xdc sysfs_create_link+0x30/0x44 device_add_class_symlinks+0x90/0x13c device_add+0xf0/0x50c ec_device_probe+0x150/0x4f0 platform_probe+0xa0/0xe0 ... BUG: KASAN: invalid-access in __memcpy+0x44/0x230 Write at addr f5ffff809e2d33ac by task kworker/u32:5/125 Pointer tag: [f5], memory tag: [fe] Tainted : [W]=WARN, [O]=OOT_MODULE Hardware name: Google Navi unprovisioned 0x7FFFFFFF/sku0 board/sku3 Workqueue: events_unbound deferred_probe_work_func Call trace: __memcpy+0x44/0x230 cros_ec_check_features+0x60/0xcc [cros_ec_proto] cros_typec_probe+0xe8/0x6e0 [cros_ec_typec] platform_probe+0xa0/0xe0
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会开源的一款操作系统内核。 Linux kernel 4.12版本存在安全漏洞，该漏洞源于dev_set_drvdata()在probe成功前设置，导致子驱动在设备释放后仍能通过过时指针访问，造成释放后重用。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
LinuxLinux 1c1d152cc5ac3a67d199728a9ba0b4f54a498f8b ~ 24522713034d521ea4b5f5f36342e2b2f7e73bd6 -
LinuxLinux 4.12 -

II. CVE-2026-64420の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2026-64420のインテリジェンス情報

请登录查看更多情报信息。

CVE-2026-64420 补丁与修复 (8)

Same Patch Batch · Linux · 2026-07-25 · 274 CVEs total

CVE-2026-643559.8 CRITICALbpf: Reject fragmented frames in devmap
CVE-2026-644599.8 CRITICALtcp: restore RCU grace period in tcp_ao_destroy_sock
CVE-2026-643039.8 CRITICALspi: fsl-lpspi: terminate the RX channel on TX prepare failure path
CVE-2026-644399.8 CRITICALcrypto: krb5 - filter out async aead implementations at alloc
CVE-2026-644109.8 CRITICALnetfilter: flowtable: IPIP tunnel hardware offload is not yet support
CVE-2026-643999.8 CRITICALksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
CVE-2026-643979.8 CRITICALksmbd: serialize QUERY_DIRECTORY requests per file
CVE-2026-643919.8 CRITICALksmbd: use opener credentials for ADS I/O
CVE-2026-643879.8 CRITICALsmb: client: fix query directory replay double-free
CVE-2026-643869.8 CRITICALsmb: client: fix query_info() replay double-free
CVE-2026-643859.8 CRITICALsmb: client: fix double-free in SMB2_ioctl() replay
CVE-2026-643839.8 CRITICALsmb: client: fix double-free in SMB2_flush() replay
CVE-2026-643849.8 CRITICALsmb: client: fix change notify replay double-free
CVE-2026-642689.8 CRITICALRDMA/siw: bound Read Response placement to the RREAD length
CVE-2026-645239.8 CRITICALnet/handshake: Take a long-lived file reference at submit
CVE-2026-642699.1 CRITICALRDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
CVE-2026-642579.1 CRITICALsmb: client: reject overlapping data areas in SMB2 responses
CVE-2026-643199.1 CRITICALnvmet-auth: validate reply message payload bounds against transfer length
CVE-2026-643209.1 CRITICALnvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page
CVE-2026-643939.1 CRITICALksmbd: run set info with opener credentials

Showing 20 of 274 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: Linux
同じベンダー: Linux

V. CVE-2026-64420へのコメント

まだコメントはありません

コメントを残す