CVE-2026-43073— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于x86-64架构中__copy_user_nocache函数命名具有误导性，该函数实际使用非临时存储进行目标内存复制，但源和目标访问均需异常处理，且未对齐部分不会使用非临时存储。
可能的 ATT&CK 技术 1 AI
T1055 · Process Injection影响版本矩阵 12
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 06917f753547e6bba8a5d17f79971d1c071a70dd< 14b9194db4a28421a4dbe5d6e519efbaa7c5f3cd |
affected |
06917f753547e6bba8a5d17f79971d1c071a70dd< c6d4e0599e7e73abc04e2488dfeb7940c4039660 |
affected | ||
06917f753547e6bba8a5d17f79971d1c071a70dd< d993e1723aa2a085aa0d72e70ea889031fc225b4 |
affected | ||
06917f753547e6bba8a5d17f79971d1c071a70dd< efea91ad1729ff1853d7418e4d3bc27d085e72d0 |
affected | ||
06917f753547e6bba8a5d17f79971d1c071a70dd< d187a86de793f84766ea40b9ade7ac60aabbb4fe |
affected | ||
4.2 |
affected | ||
< 4.2 |
unaffected | ||
6.12.83≤ 6.12.* |
unaffected | ||
| … +4 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-43073 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
x86-64: rename misleadingly named '__copy_user_nocache()' function
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
x86-64: rename misleadingly named '__copy_user_nocache()' function
This function was a masterclass in bad naming, for various historical
reasons.
It claimed to be a non-cached user copy. It is literally _neither_ of
those things. It's a specialty memory copy routine that uses
non-temporal stores for the destination (but not the source), and that
does exception handling for both source and destination accesses.
Also note that while it works for unaligned targets, any unaligned parts
(whether at beginning or end) will not use non-temporal stores, since
only words and quadwords can be non-temporal on x86.
The exception handling means that it _can_ be used for user space
accesses, but not on its own - it needs all the normal "start user space
access" logic around it.
But typically the user space access would be the source, not the
non-temporal destination. That was the original intention of this,
where the destination was some fragile persistent memory target that
needed non-temporal stores in order to catch machine check exceptions
synchronously and deal with them gracefully.
Thus that non-descriptive name: one use case was to copy from user space
into a non-cached kernel buffer. However, the existing users are a mix
of that intended use-case, and a couple of random drivers that just did
this as a performance tweak.
Some of those random drivers then actively misused the user copying
version (with STAC/CLAC and all) to do kernel copies without ever even
caring about the exception handling, _just_ for the non-temporal
destination.
Rename it as a first small step to actually make it halfway sane, and
change the prototype to be more normal: it doesn't take a user pointer
unless the caller has done the proper conversion, and the argument size
is the full size_t (it still won't actually copy more than 4GB in one
go, but there's also no reason to silently truncate the size argument in
the caller).
Finally, use this now sanely named function in the NTB code, which
mis-used a user copy version (with STAC/CLAC and all) of this interface
despite it not actually being a user copy at all.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于x86-64架构中__copy_user_nocache函数命名具有误导性，该函数实际使用非临时存储进行目标内存复制，但源和目标访问均需异常处理，且未对齐部分不会使用非临时存储。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2026-43073 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-43073 的情报信息
请登录查看更多情报信息。
CVE-2026-43073 补丁与修复 (5)
CVE-2026-43073 概念验证 (1)
同批安全公告 · Linux · 2026-05-05 · 共 15 条
| CVE-2026-43067 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2026-43071 | 9.1 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2026-43070 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-43063 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-43060 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-43062 | 7.1 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-43072 | Linux kernel 安全漏洞 | |
| CVE-2026-43069 | Linux kernel 安全漏洞 | |
| CVE-2026-43068 | Linux kernel 安全漏洞 | |
| CVE-2026-43066 | Linux kernel 安全漏洞 | |
| CVE-2026-43065 | Linux kernel 安全漏洞 | |
| CVE-2026-43064 | Linux kernel 安全漏洞 | |
| CVE-2026-43061 | Linux kernel 安全漏洞 | |
| CVE-2026-43059 | Linux kernel 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-43073
暂无评论