Yüksek CVSS 8.2
CVE-2026-64380: Linux Kernel: sınır dışı okuma
Açıklama (NVD)
In the Linux kernel, the following vulnerability has been resolved: smb: client: harden POSIX SID length parsing posix_info_sid_size() reads sid[1] to obtain the subauthority count, but its existing boundary check still accepts buffers with only one remaining byte. Require two bytes before reading sid[1] so all client paths that reuse the helper reject truncated POSIX SIDs safely.
Özet bilgiler
- Ürün
- Linux Linux Kernel
- CVSS v3.1
- 8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H - EPSS
- %0,44 (yüzdelik 39)
- CWE
- CWE-125
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| linux-linux-kernel | 5.7 | — | 5.10.261 |
| linux-linux-kernel | 5.11 | — | 5.15.212 |
| linux-linux-kernel | 5.16 | — | 6.1.178 |
| linux-linux-kernel | 6.2 | — | 6.6.145 |
| linux-linux-kernel | 6.7 | — | 6.12.96 |
| linux-linux-kernel | 6.13 | — | 6.18.39 |
| linux-linux-kernel | 6.19 | — | 7.1.4 |
| linux-linux-kernel | 7.2 | 7.2 | — |