CVE-2026-64578— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会开源的一款操作系统内核。 Linux kernel存在安全漏洞，攻击者利用该漏洞可能导致越界读取。
可能的 ATT&CK 技术 1 AI
T1190 · Exploit Public-Facing Application影响版本矩阵 16
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9< 415d0fff0451ad7ad4caa910f2bb0f562f0fd60f |
affected |
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9< 1b6740525f5af90868d557c31b496ae689c8c549 |
affected | ||
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9< 2c307126ed8e7adddab82b8e31d962d3a2156ab1 |
affected | ||
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9< f7550a91ab211726f59cb137523b7a9eae1ac6eb |
affected | ||
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9< f0e337e7db67cc1c832958bbb6c4026bdceacfdb |
affected | ||
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9< ea128f06d2fb2186f0cac0c9f3e953e4d1f5c29a |
affected | ||
e2f34481b24db2fd634b5edb0a5bd0e4d38cc6e9< 15b38176fd1530372905c602fde51fe89ec8c877 |
affected | ||
5.15 |
affected | ||
| … +8 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-64578 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
ksmbd: validate compound request size before reading StructureSize2
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: validate compound request size before reading StructureSize2
When ksmbd validates a compound (chained) SMB2 request,
ksmbd_smb2_check_message() reads pdu->StructureSize2 without first
checking that the compound element is large enough to contain it.
StructureSize2 is a 2-byte field at offset 64
(__SMB2_HEADER_STRUCTURE_SIZE) from the start of each element.
The compound-walking logic only guarantees that a full 64-byte SMB2
header is present for the trailing element: when NextCommand is 0, len is
reduced to the number of bytes remaining after next_smb2_rcv_hdr_off. A
remote client can craft a compound request whose last element has exactly
64 bytes, so the 2-byte StructureSize2 read at offset 64 extends one byte
past the receive buffer, producing a slab-out-of-bounds read.
BUG: KASAN: slab-out-of-bounds in ksmbd_smb2_check_message (fs/smb/server/smb2misc.c:402)
Read of size 2 at addr ffff888012ae31ac by task kworker/0:1/14
The buggy address is located 172 bytes inside of allocated 173-byte region
Workqueue: ksmbd-io handle_ksmbd_work
Call Trace:
...
kasan_report (mm/kasan/report.c:595)
ksmbd_smb2_check_message (fs/smb/server/smb2misc.c:402)
handle_ksmbd_work (fs/smb/server/server.c:119)
process_one_work (kernel/workqueue.c:3314)
worker_thread (kernel/workqueue.c:3397)
kthread (kernel/kthread.c:436)
ret_from_fork (arch/x86/kernel/process.c:158)
ret_from_fork_asm (arch/x86/entry/entry_64.S:245)
Reject any compound element that is too small to hold StructureSize2
before dereferencing it.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会开源的一款操作系统内核。 Linux kernel存在安全漏洞，攻击者利用该漏洞可能导致越界读取。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2026-64578 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-64578 的情报信息
请登录查看更多情报信息。
CVE-2026-64578 补丁与修复 (7)
同批安全公告 · Linux · 2026-08-05 · 共 17 条
| CVE-2026-64566 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2026-64567 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64568 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64570 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64574 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64575 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64580 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64581 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64582 | 7.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64577 | 7.5 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64576 | 7.1 HIGH | Linux kernel 安全漏洞 |
| CVE-2026-64569 | Linux kernel 安全漏洞 | |
| CVE-2026-64571 | Linux kernel 安全漏洞 | |
| CVE-2026-64572 | Linux kernel 安全漏洞 | |
| CVE-2026-64573 | Linux kernel 安全漏洞 | |
| CVE-2026-64579 | Linux kernel 安全漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-64578
暂无评论