CVE-2026-74354— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1055 · Process InjectionAffected Version Matrix 6
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-74354の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
bpf: Take mmap_lock in zap_pages()
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: bpf: Take mmap_lock in zap_pages() zap_vma_range() requires the owning mm's mmap_lock to be held. Taking mmap_read_lock under arena->lock would AB-BA against arena_vm_close() and arena_map_mmap(), both of which run with mmap_write_lock held and then acquire arena->lock. Instead drop arena->lock, mmget_not_zero() the vma's mm, take mmap_read_lock, and re-resolve the vma via find_vma() since it may have been unmapped or replaced while waiting. Track processed vmls with a per-call generation in vml->zap_gen and serialize zap_pages() callers with a new arena->zap_mutex so concurrent callers on different uaddr ranges do not mark each other's vmls processed before the zap is done.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel 6.9版本存在安全漏洞，该漏洞源于zap_pages()函数在调用zap_vma_range()时未正确获取mmap_lock，存在锁顺序问题，可能导致死锁。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-74354の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-74354のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-74354 补丁与修复 (2)
Same Patch Batch · Linux · 2026-08-15 · 846 CVEs total
| CVE-2026-74280 | 10.0 CRITICAL | crypto: marvell/octeontx - fix DMA cleanup using wrong loop index |
| CVE-2026-74279 | 10.0 CRITICAL | crypto: cavium/cpt - fix DMA cleanup using wrong loop index |
| CVE-2026-72407 | 10.0 CRITICAL | geneve: validate inner network offset in geneve_gro_complete() |
| CVE-2026-74475 | 10.0 CRITICAL | vxlan: use neigh_ha_snapshot() in route_shortcircuit() |
| CVE-2026-72408 | 10.0 CRITICAL | geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint |
| CVE-2026-74309 | 10.0 CRITICAL | vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler |
| CVE-2026-72421 | 10.0 CRITICAL | ipv4: fib: Don't ignore error route in local/main tables. |
| CVE-2026-72493 | 9.9 CRITICAL | net: serialize netif_running() check in enqueue_to_backlog() |
| CVE-2026-72463 | 9.8 CRITICAL | xfrm: Fix dev use-after-free in xfrm async resumption |
| CVE-2026-72248 | 9.8 CRITICAL | netfilter: flowtable: support IPIP tunnel with direct xmit |
| CVE-2026-72381 | 9.8 CRITICAL | ksmbd: fix use-after-free of fp->owner.name in durable handle owner check |
| CVE-2026-72477 | 9.8 CRITICAL | fs/ntfs3: call _ntfs_bad_inode() when failing to rename |
| CVE-2026-72473 | 9.8 CRITICAL | xprtrdma: Decouple req recycling from RPC completion |
| CVE-2026-72472 | 9.8 CRITICAL | nfs: use nfsi->rwsem to protect traversal of the file lock list |
| CVE-2026-74406 | 9.8 CRITICAL | vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). |
| CVE-2026-72222 | 9.8 CRITICAL | sunrpc: pin svc_xprt across the asynchronous TLS handshake callback |
| CVE-2026-72137 | 9.8 CRITICAL | xfrm: nat_keepalive: avoid double free on send error |
| CVE-2026-72226 | 9.8 CRITICAL | batman-adv: tt: prevent TVLV OOB check overflow |
| CVE-2026-74376 | 9.8 CRITICAL | md/raid10: reset read_slot when reusing r10bio for discard |
| CVE-2026-72234 | 9.8 CRITICAL | batman-adv: access unicast_ttvn skb->data only after skb realloc |
Showing 20 of 846 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
同じベンダー: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
V. CVE-2026-74354へのコメント
まだコメントはありません