CVE-2026-72098— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 8
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | a739ff3f543afbb4a041c16cd0182c8e8d366e70< 5488d3a69d205e28f74f18857b853aa12e778e66 | affected |
a739ff3f543afbb4a041c16cd0182c8e8d366e70< f7990c2b0f08b8841fcd2652d1d7002f5994a7a7 | affected | ||
a739ff3f543afbb4a041c16cd0182c8e8d366e70< 31d6e6c0ba8d5a7bd59660035a089307100c5e8e | affected | ||
4.5 | affected | ||
< 4.5 | unaffected | ||
6.18.42≤ 6.18.* | unaffected | ||
7.1.5≤ 7.1.* | unaffected | ||
7.2≤ * | unaffected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-72098の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
dm-verity: fix buffer overflow in FEC calculation
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer overflow in dm-verity-fec: if (neras && *neras <= v->fec->roots) fio->erasures[(*neras)++] = i; This allows *neras to reach roots + 1 (the post-increment pushes it past roots). This value is then passed as no_eras to decode_rs8(). Inside the RS decoder (lib/reed_solomon/decode_rs.c:113-121), the erasure locator polynomial loop writes lambda[j] where j can reach nroots + 1 — one element past the end of lambda[] (which is sized nroots + 1, valid indices 0..nroots). The out-of-bounds write lands on syn[0], corrupting the syndrome buffer.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel存在安全漏洞，该漏洞源于dm-verity FEC计算中缓冲区溢出，由于对擦除计数的验证不当导致越界写入，可能破坏内存。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-72098の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-72098のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-72098 补丁与修复 (3)
Same Patch Batch · Linux · 2026-08-15 · 845 CVEs total
| CVE-2026-74475 | 10.0 CRITICAL | vxlan: use neigh_ha_snapshot() in route_shortcircuit() |
| CVE-2026-74279 | 10.0 CRITICAL | crypto: cavium/cpt - fix DMA cleanup using wrong loop index |
| CVE-2026-72421 | 10.0 CRITICAL | ipv4: fib: Don't ignore error route in local/main tables. |
| CVE-2026-74280 | 10.0 CRITICAL | crypto: marvell/octeontx - fix DMA cleanup using wrong loop index |
| CVE-2026-74309 | 10.0 CRITICAL | vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler |
| CVE-2026-72408 | 10.0 CRITICAL | geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint |
| CVE-2026-72407 | 10.0 CRITICAL | geneve: validate inner network offset in geneve_gro_complete() |
| CVE-2026-72493 | 9.9 CRITICAL | net: serialize netif_running() check in enqueue_to_backlog() |
| CVE-2026-74434 | 9.8 CRITICAL | rxrpc: Don't move a peeked OOB message onto the pending queue |
| CVE-2026-72065 | 9.8 CRITICAL | net: mana: Validate the packet length reported by the NIC |
| CVE-2026-72064 | 9.8 CRITICAL | net: mana: Sync page pool RX frags for CPU |
| CVE-2026-72317 | 9.8 CRITICAL | SUNRPC: pin upper rpc_clnt across the TLS connect_worker |
| CVE-2026-74427 | 9.8 CRITICAL | afs: Fix netns teardown to cancel the preallocation charger |
| CVE-2026-72137 | 9.8 CRITICAL | xfrm: nat_keepalive: avoid double free on send error |
| CVE-2026-72429 | 9.8 CRITICAL | ipv6: ioam: fix type confusion of dst_entry |
| CVE-2026-74428 | 9.8 CRITICAL | rxrpc: Fix double unlock in rxrpc_recvmsg() |
| CVE-2026-72139 | 9.8 CRITICAL | tcp: defer md5sig_info kfree past RCU grace period in tcp_connect |
| CVE-2026-72436 | 9.8 CRITICAL | netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types |
| CVE-2026-72046 | 9.8 CRITICAL | gve: fix header buffer corruption with header-split and HW-GRO |
| CVE-2026-72451 | 9.8 CRITICAL | xfrm: Fix xfrm state cache insertion race |
Showing 20 of 845 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-74733
gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock - CVE-2026-74732
drm/amd/display: Check for tg ops in dce110_set_avmute - CVE-2026-74731
sched_ext: Skip sub-disable teardown for never-linked sub-sc - CVE-2026-74730
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call - CVE-2026-74729
soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_
同じベンダー: Linux
- CVE-2026-74733
gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock - CVE-2026-74732
drm/amd/display: Check for tg ops in dce110_set_avmute - CVE-2026-74731
sched_ext: Skip sub-disable teardown for never-linked sub-sc - CVE-2026-74730
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call - CVE-2026-74729
soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_
V. CVE-2026-72098へのコメント
まだコメントはありません