CVE-2026-23445— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 10
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 15fd021bc4270273d8f4b7f58fdda8a16214a377< 5e4c90c94eb766d70e30694b7fe66862aabaf24b | affected |
15fd021bc4270273d8f4b7f58fdda8a16214a377< 31521c124e6488c4a81658e35199feb75a988d86 | affected | ||
15fd021bc4270273d8f4b7f58fdda8a16214a377< b02fa17d1744d19cd3820bdbf6ec5d85547977bf | affected | ||
15fd021bc4270273d8f4b7f58fdda8a16214a377< 45b33e805bd39f615d9353a7194b2da5281332df | affected | ||
6.10 | affected | ||
< 6.10 | unaffected | ||
6.12.78≤ 6.12.* | unaffected | ||
6.18.20≤ 6.18.* | unaffected | ||
| … +2 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-23445の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
igc: fix page fault in XDP TX timestamps handling
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: igc: fix page fault in XDP TX timestamps handling If an XDP application that requested TX timestamping is shutting down while the link of the interface in use is still up the following kernel splat is reported: [ 883.803618] [ T1554] BUG: unable to handle page fault for address: ffffcfb6200fd008 ... [ 883.803650] [ T1554] Call Trace: [ 883.803652] [ T1554] <TASK> [ 883.803654] [ T1554] igc_ptp_tx_tstamp_event+0xdf/0x160 [igc] [ 883.803660] [ T1554] igc_tsync_interrupt+0x2d5/0x300 [igc] ... During shutdown of the TX ring the xsk_meta pointers are left behind, so that the IRQ handler is trying to touch them. This issue is now being fixed by cleaning up the stale xsk meta data on TX shutdown. TX timestamps on other queues remain unaffected.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于XDP TX时间戳处理存在过时指针，可能导致空指针取消引用。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-23445の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-23445のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Linux · 2026-04-03 · 71 CVEs total
| CVE-2026-31402 | 9.8 CRITICAL | nfsd: fix heap overflow in NFSv4.0 LOCK replay cache |
| CVE-2026-23450 | 9.8 CRITICAL | net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() |
| CVE-2026-23427 | 9.8 CRITICAL | ksmbd: fix use-after-free in durable v2 replay of active file handles |
| CVE-2026-23428 | 9.8 CRITICAL | ksmbd: fix use-after-free of share_conf in compound request |
| CVE-2026-23455 | 9.1 CRITICAL | netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() |
| CVE-2026-23425 | 8.8 HIGH | KVM: arm64: Fix ID register initialization for non-protected pKVM guests |
| CVE-2026-23461 | 8.8 HIGH | Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user |
| CVE-2026-23462 | 8.8 HIGH | Bluetooth: HIDP: Fix possible UAF |
| CVE-2026-23457 | 8.6 HIGH | netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() |
| CVE-2026-23456 | 8.2 HIGH | netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case |
| CVE-2026-23459 | 8.2 HIGH | ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS |
| CVE-2026-31393 | 8.1 HIGH | Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access |
| CVE-2026-31392 | 8.1 HIGH | smb: client: fix krb5 mount with username option |
| CVE-2026-23466 | 7.8 HIGH | drm/xe: Open-code GGTT MMIO access protection |
| CVE-2026-23432 | 7.8 HIGH | mshv: Fix use-after-free in mshv_map_user_memory error path |
| CVE-2026-31401 | 7.8 HIGH | HID: bpf: prevent buffer overflow in hid_hw_request |
| CVE-2026-23437 | 7.8 HIGH | net: shaper: protect late read accesses to the hierarchy |
| CVE-2026-23458 | 7.8 HIGH | netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() |
| CVE-2026-23444 | 7.8 HIGH | wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure |
| CVE-2026-23449 | 7.8 HIGH | net/sched: teql: Fix double-free in teql_master_xmit |
Showing 20 of 71 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev - CVE-2026-74575
thunderbolt: Prevent XDomain delayed work use-after-free on
同じベンダー: Linux
- CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev - CVE-2026-74575
thunderbolt: Prevent XDomain delayed work use-after-free on
V. CVE-2026-23445へのコメント
まだコメントはありません