CVE-2026-64517— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1211 · Exploitation for StealthAffected Version Matrix 10
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 2e5d47fe7839298fa096970e184aac9bf82c3bd3< 7cb975fcd4777e7bad688f66aa0c10c16dd8276b | affected |
2e5d47fe7839298fa096970e184aac9bf82c3bd3< 2c890e71ae26fa32f5a96c3694b71a2c310940e7 | affected | ||
2e5d47fe7839298fa096970e184aac9bf82c3bd3< 889f70de2b51a877339e1979aab95111b41bed75 | affected | ||
2e5d47fe7839298fa096970e184aac9bf82c3bd3< d3ded53fab90996e7d94a39049e11962dd066725 | affected | ||
6.12 | affected | ||
< 6.12 | unaffected | ||
6.12.92≤ 6.12.* | unaffected | ||
6.18.34≤ 6.18.* | unaffected | ||
| … +2 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-64517の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
drm/xe/gsc: Fix double-free of managed BO in error path
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-free of managed BO in error path The error path in xe_gsc_init_post_hwconfig() explicitly frees a BO allocated with xe_managed_bo_create_pin_map() via xe_bo_unpin_map_no_vm(). Since the managed BO already has a devm cleanup action registered, this causes a double-free when devm unwinds during probe failure. Remove the explicit free and let devm handle it, consistent with all other xe_managed_bo_create_pin_map() callers. (cherry picked from commit 71d61e3e299a17139e47f980a4d6f425b2c59bf7)
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会开源的一款操作系统内核。 Linux kernel 6.12版本存在安全漏洞，该漏洞源于错误路径中显式释放managed BO导致双重释放。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-64517の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-64517のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-64517 补丁与修复 (4)
Same Patch Batch · Linux · 2026-07-25 · 274 CVEs total
| CVE-2026-64391 | 9.8 CRITICAL | ksmbd: use opener credentials for ADS I/O |
| CVE-2026-64268 | 9.8 CRITICAL | RDMA/siw: bound Read Response placement to the RREAD length |
| CVE-2026-64384 | 9.8 CRITICAL | smb: client: fix change notify replay double-free |
| CVE-2026-64383 | 9.8 CRITICAL | smb: client: fix double-free in SMB2_flush() replay |
| CVE-2026-64385 | 9.8 CRITICAL | smb: client: fix double-free in SMB2_ioctl() replay |
| CVE-2026-64386 | 9.8 CRITICAL | smb: client: fix query_info() replay double-free |
| CVE-2026-64387 | 9.8 CRITICAL | smb: client: fix query directory replay double-free |
| CVE-2026-64439 | 9.8 CRITICAL | crypto: krb5 - filter out async aead implementations at alloc |
| CVE-2026-64303 | 9.8 CRITICAL | spi: fsl-lpspi: terminate the RX channel on TX prepare failure path |
| CVE-2026-64355 | 9.8 CRITICAL | bpf: Reject fragmented frames in devmap |
| CVE-2026-64459 | 9.8 CRITICAL | tcp: restore RCU grace period in tcp_ao_destroy_sock |
| CVE-2026-64399 | 9.8 CRITICAL | ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE |
| CVE-2026-64410 | 9.8 CRITICAL | netfilter: flowtable: IPIP tunnel hardware offload is not yet support |
| CVE-2026-64397 | 9.8 CRITICAL | ksmbd: serialize QUERY_DIRECTORY requests per file |
| CVE-2026-64523 | 9.8 CRITICAL | net/handshake: Take a long-lived file reference at submit |
| CVE-2026-64320 | 9.1 CRITICAL | nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page |
| CVE-2026-64319 | 9.1 CRITICAL | nvmet-auth: validate reply message payload bounds against transfer length |
| CVE-2026-64269 | 9.1 CRITICAL | RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg |
| CVE-2026-64393 | 9.1 CRITICAL | ksmbd: run set info with opener credentials |
| CVE-2026-64392 | 9.1 CRITICAL | ksmbd: use opener credentials for delete-on-close |
Showing 20 of 274 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-64560
posix-cpu-timers: Prevent UAF caused by non-leader exec() ra - CVE-2026-64559
s390/pkey: Check length in PKEY_VERIFYPROTK ioctl - CVE-2026-64558
s390/pkey: Check length in pkey_pckmo handler implementation - CVE-2026-64556
perf/core: Detach event groups during remove_on_exec - CVE-2026-64557
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_conne
同じベンダー: Linux
- CVE-2026-64560
posix-cpu-timers: Prevent UAF caused by non-leader exec() ra - CVE-2026-64559
s390/pkey: Check length in PKEY_VERIFYPROTK ioctl - CVE-2026-64558
s390/pkey: Check length in pkey_pckmo handler implementation - CVE-2026-64556
perf/core: Detach event groups during remove_on_exec - CVE-2026-64557
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_conne
V. CVE-2026-64517へのコメント
まだコメントはありません