CVE-2026-64210— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会开源的一款操作系统内核。 Linux kernel 5.3版本存在安全漏洞，该漏洞源于在NAPI轮询期间，CPU亲和性改变时对ICOSQ的未保护写入操作，可能导致竞争条件及系统错误。
影响版本矩阵 14
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | db05815b36cbd486c86fd002dfa81c9af6245e25< 0c8f331485656d5937d56a488016b944a038fe2f |
affected |
db05815b36cbd486c86fd002dfa81c9af6245e25< f3d8c2fd591bb603b069e151881a317e26a3f478 |
affected | ||
db05815b36cbd486c86fd002dfa81c9af6245e25< f37adef34eb7ebe29a534d20ccadd72bd7ff664e |
affected | ||
db05815b36cbd486c86fd002dfa81c9af6245e25< 54a97ef1025236cc1bc54d79c7ae2eb8027ce4b8 |
affected | ||
db05815b36cbd486c86fd002dfa81c9af6245e25< 8d3b91e7d81000d295cd914d4d9d6f860252e2bf |
affected | ||
db05815b36cbd486c86fd002dfa81c9af6245e25< c326f9c68921e2f14dfcecb2f6b4216313d50248 |
affected | ||
5.3 |
affected | ||
< 5.3 |
unaffected | ||
| … +6 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-64210 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
net/mlx5e: xsk: Fix unlocked writing to ICOSQ
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: xsk: Fix unlocked writing to ICOSQ
During napi poll, when the affinity changes and there's still XSK work
to be done, we trigger an ICOSQ interrupt on the new CPU. However, this
triggering on the ICOSQ is done unprotected.
There are 2 such races:
A) mlx5e_trigger_irq() is called while mlx5e_xsk_alloc_rx_mpwqe() is
running from a different CPU due to affinity change. This can happen
because IRQ triggering is done after napi_complete_done(). At this point
the NAPI can be scheduled on a different CPU. Like this:
CPU A (old affinity, NAPI tail) CPU B (new affinity, fresh NAPI)
------------------------------- --------------------------------
napi_complete_done() clears SCHED
mlx5e_cq_arm(...)
napi_schedule_prep() sets SCHED
mlx5e_napi_poll()
mlx5e_xsk_alloc_rx_mpwqe()
mlx5e_icosq_sync_lock() // noop
memcpy 640 B UMR body
advance sq->pc by 10
mlx5e_trigger_irq(&c->icosq)
wqe_info[pi] = {NOP, 1}
mlx5e_post_nop() advances sq->pc
B) mlx5e_trigger_irq() is called on the ICOSQ when
mlx5e_trigger_napi_icosq() is running.
The obvious fix would be to lock the ICOSQ. But ICOSQ has an optimized
locking scheme that doesn't work for this scenario. Kick the async ICOSQ
instead which is always locked.
This issue was noticed in the wild with the following splat:
netdevice: ge-0-0-1: Bad OP in ICOSQ CQE: 0xd
WARNING: drivers/net/ethernet/mellanox/mlx5/core/en_rx.c:826 [...]
[...]
Call Trace:
<IRQ>
mlx5e_napi_poll+0x11d/0x7f0 [mlx5_core]
__napi_poll+0x30/0x200
? skb_defer_free_flush+0x9c/0xc0
net_rx_action+0x2fe/0x3f0
handle_softirqs+0xd8/0x340
__irq_exit_rcu+0xbc/0xe0
common_interrupt+0x85/0xa0
</IRQ>
<TASK>
asm_common_interrupt+0x26/0x40
[...]
---[ end trace 0000000000000000 ]---
mlx5_core 0000:08:00.0 ge-0-0-1: Error cqe on cqn 0x548, ci 0x2022, qn 0x8f4,
opcode 0xd, syndrome 0x2, vendor syndrome 0x68
00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000030: 00 00 00 00 01 00 68 02 01 00 08 f4 de 14 59 d2
WQE DUMP: WQ size 16384 WQ cur size 0, WQE index 0x1e14, len: 64
00000000: 00 00 00 01 d9 ed 80 02 00 00 00 01 d9 ed 90 02
00000010: 00 00 00 01 d9 ed a0 02 00 00 00 01 d9 ed b0 02
00000020: 00 00 00 01 d9 ed c0 02 00 00 00 01 d9 ed d0 02
00000030: 00 00 00 01 d9 ed e0 02 00 00 00 01 d9 ed f0 02
mlx5_core 0000:08:00.0 ge-0-0-1: Error cqe on cqn 0x548, ci 0x2023, qn 0x8f4,
opcode 0xd, syndrome 0x5, vendor syndrome 0xf9
00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000030: 00 00 00 00 01 00 f9 05 01 00 08 f4 de 15 cf d2
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会开源的一款操作系统内核。 Linux kernel 5.3版本存在安全漏洞，该漏洞源于在NAPI轮询期间，CPU亲和性改变时对ICOSQ的未保护写入操作，可能导致竞争条件及系统错误。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2026-64210 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-64210 的情报信息
请登录查看更多情报信息。
CVE-2026-64210 补丁与修复 (6)
同批安全公告 · Linux · 2026-07-24 · 共 48 条
| CVE-2026-64232 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2026-64216 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2026-64255 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64247 | 8.4 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64235 | 8.1 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64223 | 8.1 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64251 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64226 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64221 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64218 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64217 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64208 | 7.5 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64243 | 7.1 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64219 | 7.0 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64222 | 7.0 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64252 | Linux kernel 安全漏洞 | |
| CVE-2026-64224 | Linux kernel 安全漏洞 | |
| CVE-2026-64250 | Linux kernel 安全漏洞 | |
| CVE-2026-64248 | Linux kernel 安全漏洞 | |
| CVE-2026-64254 | Linux kernel 安全漏洞 |
显示前 20 条，共 48 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-64210
暂无评论