CVE-2024-26679— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1055 · Process InjectionAffected Version Matrix 20
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | f4713a3dfad045d46afcb9c2a7d0bba288920ed4< caa064c3c2394d03e289ebd6b0be5102eb8a5b40 | affected |
f4713a3dfad045d46afcb9c2a7d0bba288920ed4< 5993f121fbc01dc2d734f0ff2628009b258fb1dd | affected | ||
f4713a3dfad045d46afcb9c2a7d0bba288920ed4< 88081ba415224cf413101def4343d660f56d082b | affected | ||
f4713a3dfad045d46afcb9c2a7d0bba288920ed4< 3266e638ba5cc1165f5e6989eb8c0720f1cc4b41 | affected | ||
f4713a3dfad045d46afcb9c2a7d0bba288920ed4< 54538752216bf89ee88d47ad07802063a498c299 | affected | ||
f4713a3dfad045d46afcb9c2a7d0bba288920ed4< 4a5e31bdd3c1702b520506d9cf8c41085f75c7f2 | affected | ||
f4713a3dfad045d46afcb9c2a7d0bba288920ed4< 307fa8a75ab7423fa5c73573ec3d192de5027830 | affected | ||
f4713a3dfad045d46afcb9c2a7d0bba288920ed4< eef00a82c568944f113f2de738156ac591bbd5cd | affected | ||
| … +12 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2024-26679の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
inet: read sk->sk_family once in inet_recv_error()
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: inet: read sk->sk_family once in inet_recv_error() inet_recv_error() is called without holding the socket lock. IPv6 socket could mutate to IPv4 with IPV6_ADDRFORM socket option and trigger a KCSAN warning.
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于调用 inet_recv_error() 时无需持有套接字锁。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2024-26679の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2024-26679のインテリジェンス情報
请登录查看更多情报信息。
CVE-2024-26679 邮件列表归档 (2)
CVE-2024-26679 其他参考 (8)
Same Patch Batch · Linux · 2024-04-02 · 35 CVEs total
| CVE-2024-26665 | 9.1 CRITICAL | tunnels: fix out of bounds access when building IPv6 PMTU error |
| CVE-2023-52636 | 8.2 HIGH | libceph: just wait for more data to be available on the socket |
| CVE-2024-26659 | 7.8 HIGH | xhci: handle isoc Babble and Buffer Overrun events properly |
| CVE-2024-26656 | 7.8 HIGH | drm/amdgpu: fix use-after-free bug |
| CVE-2024-26663 | 7.8 HIGH | tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() |
| CVE-2024-26664 | 7.8 HIGH | hwmon: (coretemp) Fix out-of-bounds memory access |
| CVE-2024-26666 | 7.1 HIGH | wifi: mac80211: fix RCU use in TDLS fast-xmit |
| CVE-2024-26660 | 7.0 HIGH | drm/amd/display: Implement bounds check for stream encoder creation in DCN301 |
| CVE-2024-26672 | drm/amdgpu: Fix variable 'mca_funcs' dereferenced before NULL check in 'amdgpu_mca_smu_get | |
| CVE-2023-52633 | um: time-travel: fix time corruption | |
| CVE-2024-26673 | netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations | |
| CVE-2024-26674 | x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups | |
| CVE-2024-26675 | ppp_async: limit MRU to 64K | |
| CVE-2024-26676 | af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. | |
| CVE-2024-26677 | rxrpc: Fix delayed ACKs to not set the reference serial number | |
| CVE-2024-26678 | x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section | |
| CVE-2024-26680 | net: atlantic: Fix DMA mapping for PTP hwts ring | |
| CVE-2024-26681 | netdevsim: avoid potential loop in nsim_dev_trap_report_work() | |
| CVE-2024-26682 | wifi: mac80211: improve CSA/ECSA connection refusal | |
| CVE-2024-26683 | wifi: cfg80211: detect stuck ECSA element in probe resp |
Showing 20 of 35 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
同じベンダー: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
V. CVE-2024-26679へのコメント
まだコメントはありません