7.1
Élevée
CVE-2026-46243 In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego…
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 7.1 | premières → < 7.1 | 7.1 |
| Linux 7.0 | premières → < 7.0.11 | 7.0.11 |
| Linux 6.18 | premières → < 6.18.34 | 6.18.34 |
| Linux 6.12 | premières → < 6.12.92 | 6.12.92 |
| Linux 6.6 | premières → < 6.6.142 | 6.6.142 |
| Linux 6.1 | premières → < 6.1.175 | 6.1.175 |
| Linux 5.15 | premières → < 5.15.209 | 5.15.209 |
| Linux 5.10 | premières → < 5.10.258 | 5.10.258 |
| Linux | 2.6.24 | Pas de correctif indiqué |
Afficher les 71 autres branches Masquer les 71 autres branches
Références
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
- git.kernel.org git.kernel.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Linux
Les 18283 CVE de Linux →
CVE-2026-99270
In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix potential UAF in reqsk_timer_handler()
8.1
Élevée
CVE-2026-99269
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before…
7.8
Élevée
CVE-2026-99261
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: correct reservation fence slots for…
Non notée
CVE-2026-99260
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags…
Non notée