目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

CVE-2026-64162— Linux kernel 安全漏洞

CVSS 9.8 · Critical EPSS 0.35% · P27

Affected Version Matrix 8

ベンダープロダクトVersion Rangeステータス
LinuxLinux5cb8805d2366b20ee4d7afff586d8acf17649330< eb5991d4c8ba2e8153dfcda3e66a9608377b7dceaffected
5cb8805d2366b20ee4d7afff586d8acf17649330< 3122d70b7c0101d897fb795658a7b93f854935f2affected
5cb8805d2366b20ee4d7afff586d8acf17649330< da4f76b6a84ede14a71282ef841768299ead0221affected
6.16affected
< 6.16unaffected
6.18.34≤ 6.18.*unaffected
7.0.11≤ 7.0.*unaffected
7.1≤ *unaffected
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2026-64162の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() In idpf_ptp_init(), read_dev_clk_lock is initialized after ptp_schedule_worker() had already been called (and after idpf_ptp_settime64() could reach the lock). The PTP aux worker fires immediately upon scheduling and can call into idpf_ptp_read_src_clk_reg_direct(), which takes spin_lock(&ptp->read_dev_clk_lock) on an uninitialized lock, triggering the lockdep "non-static key" warning: [12973.796587] idpf 0000:83:00.0: Device HW Reset initiated [12974.094507] INFO: trying to register non-static key. ... [12974.097208] Call Trace: [12974.097213] <TASK> [12974.097218] dump_stack_lvl+0x93/0xe0 [12974.097234] register_lock_class+0x4c4/0x4e0 [12974.097249] ? __lock_acquire+0x427/0x2290 [12974.097259] __lock_acquire+0x98/0x2290 [12974.097272] lock_acquire+0xc6/0x310 [12974.097281] ? idpf_ptp_read_src_clk_reg+0xb7/0x150 [idpf] [12974.097311] ? lockdep_hardirqs_on_prepare+0xde/0x190 [12974.097318] ? finish_task_switch.isra.0+0xd2/0x350 [12974.097330] ? __pfx_ptp_aux_kworker+0x10/0x10 [ptp] [12974.097343] _raw_spin_lock+0x30/0x40 [12974.097353] ? idpf_ptp_read_src_clk_reg+0xb7/0x150 [idpf] [12974.097373] idpf_ptp_read_src_clk_reg+0xb7/0x150 [idpf] [12974.097391] ? kthread_worker_fn+0x88/0x3d0 [12974.097404] ? kthread_worker_fn+0x4e/0x3d0 [12974.097411] idpf_ptp_update_cached_phctime+0x26/0x120 [idpf] [12974.097428] ? _raw_spin_unlock_irq+0x28/0x50 [12974.097436] idpf_ptp_do_aux_work+0x15/0x20 [idpf] [12974.097454] ptp_aux_kworker+0x20/0x40 [ptp] [12974.097464] kthread_worker_fn+0xd5/0x3d0 [12974.097474] ? __pfx_kthread_worker_fn+0x10/0x10 [12974.097482] kthread+0xf4/0x130 [12974.097489] ? __pfx_kthread+0x10/0x10 [12974.097498] ret_from_fork+0x32c/0x410 [12974.097512] ? __pfx_kthread+0x10/0x10 [12974.097519] ret_from_fork_asm+0x1a/0x30 [12974.097540] </TASK> Move the call to spin_lock_init() up a bit to make sure read_dev_clk_lock is not touched before it's been initialized.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会开源的一款操作系统内核。 Linux kernel 6.16版本存在安全漏洞，该漏洞源于idpf_ptp_init()中read_dev_clk_lock自旋锁初始化不当，导致在锁被使用前未能正确初始化，从而触发锁依赖的非静态键警告。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
LinuxLinux 5cb8805d2366b20ee4d7afff586d8acf17649330 ~ eb5991d4c8ba2e8153dfcda3e66a9608377b7dce -
LinuxLinux 6.16 -

II. CVE-2026-64162の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2026-64162のインテリジェンス情報

请登录查看更多情报信息。

CVE-2026-64162 补丁与修复 (3)

Same Patch Batch · Linux · 2026-07-19 · 431 CVEs total

CVE-2026-6379510.0 CRITICAL9p: avoid putting oldfid in p9_client_walk() error path
CVE-2026-638009.8 CRITICALpNFS: Fix use-after-free in pnfs_update_layout()
CVE-2026-640559.8 CRITICALnet: ethernet: cortina: Carry over frag counter
CVE-2026-640569.8 CRITICALnet: ethernet: cortina: Make RX SKB per-port
CVE-2026-640619.8 CRITICALnetfs: Fix early put of sink folio in netfs_read_gaps()
CVE-2026-640669.8 CRITICALnetfs: Fix netfs_read_to_pagecache() to pause on subreq failure
CVE-2026-640679.8 CRITICALnetfs: Fix missing barriers when accessing stream->subrequests locklessly
CVE-2026-640689.8 CRITICALnetfs: Fix missing locking around retry adding new subreqs
CVE-2026-640699.8 CRITICALnetfs: Fix cancellation of a DIO and single read subrequests
CVE-2026-638089.8 CRITICALexfat: fix potential use-after-free in exfat_find_dir_entry()
CVE-2026-640899.8 CRITICALbatman-adv: tt: fix negative last_changeset_len
CVE-2026-640919.8 CRITICALbatman-adv: tt: fix TOCTOU race for reported vlans
CVE-2026-533999.8 CRITICALnfsd: release layout stid on setlease failure
CVE-2026-641429.8 CRITICALksmbd: close durable scavenger races against m_fp_list lookups
CVE-2026-533989.8 CRITICALNFSD: Fix SECINFO_NO_NAME decode error cleanup
CVE-2026-641369.8 CRITICALsmb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
CVE-2026-641329.8 CRITICALipv6: ioam: refresh hdr pointer before ioam6_event()
CVE-2026-641229.8 CRITICALnet/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover
CVE-2026-641029.8 CRITICALRDMA/siw: Reject MPA FPDU length underflow before signed receive math
CVE-2026-641139.8 CRITICALixgbevf: fix use-after-free in VEPA multicast source pruning

Showing 20 of 431 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: Linux
同じベンダー: Linux

V. CVE-2026-64162へのコメント

まだコメントはありません

コメントを残す