CVE-2026-74355— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1564.004 · NTFS File AttributesAffected Version Matrix 8
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 4f1492efb495bcef34c9ee8a94af81e6cea5abf4< f5102e0fc3c6dc8685549891a96e4589fdb3e211 | affected |
4f1492efb495bcef34c9ee8a94af81e6cea5abf4< d16923a45d4d08367650fdc3451c89299ab6ac5a | affected | ||
4f1492efb495bcef34c9ee8a94af81e6cea5abf4< 43bd9e6d5513cb1edbafdeef146a1edc3aaced56 | affected | ||
6.15 | affected | ||
< 6.15 | unaffected | ||
6.18.40≤ 6.18.* | unaffected | ||
7.1.5≤ 7.1.* | unaffected | ||
7.2≤ * | unaffected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-74355の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
iommu/vt-d: Fix RB-tree corruption in probe error path
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe error path The info->node RB-tree member is zero-initialized via kzalloc. If a device does not support ATS, the device_rbtree_insert() call is skipped. If a subsequent probe step fails, the error path jumps to device_rbtree_remove(), which misinterprets the zeroed node as a tree root and corrupts the device RB-tree. Fix this by explicitly initializing the RB-node as empty using RB_CLEAR_NODE() during initialization and guarding the removal with RB_EMPTY_NODE().
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel 6.15版本存在安全漏洞，该漏洞源于设备RB-tree节点未正确初始化，如果设备不支持ATS则跳过插入操作，后续探测失败时错误路径将零初始化节点误解为树根，导致RB-tree损坏。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-74355の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-74355のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-74355 补丁与修复 (3)
Same Patch Batch · Linux · 2026-08-15 · 845 CVEs total
| CVE-2026-74280 | 10.0 CRITICAL | crypto: marvell/octeontx - fix DMA cleanup using wrong loop index |
| CVE-2026-74279 | 10.0 CRITICAL | crypto: cavium/cpt - fix DMA cleanup using wrong loop index |
| CVE-2026-72421 | 10.0 CRITICAL | ipv4: fib: Don't ignore error route in local/main tables. |
| CVE-2026-74475 | 10.0 CRITICAL | vxlan: use neigh_ha_snapshot() in route_shortcircuit() |
| CVE-2026-72408 | 10.0 CRITICAL | geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint |
| CVE-2026-72407 | 10.0 CRITICAL | geneve: validate inner network offset in geneve_gro_complete() |
| CVE-2026-74309 | 10.0 CRITICAL | vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler |
| CVE-2026-72493 | 9.9 CRITICAL | net: serialize netif_running() check in enqueue_to_backlog() |
| CVE-2026-72041 | 9.8 CRITICAL | espintcp: use sk_msg_free_partial to fix partial send |
| CVE-2026-74436 | 9.8 CRITICAL | rxrpc: serialize kernel accept preallocation with socket teardown |
| CVE-2026-72211 | 9.8 CRITICAL | ntfs: grow index root value before reparent header update |
| CVE-2026-72209 | 9.8 CRITICAL | ntfs: validate attribute values on lookup |
| CVE-2026-72208 | 9.8 CRITICAL | ntfs: add bounds check before accessing EA entries |
| CVE-2026-72299 | 9.8 CRITICAL | tipc: restrict socket queue dumps in enqueue tracepoints |
| CVE-2026-74434 | 9.8 CRITICAL | rxrpc: Don't move a peeked OOB message onto the pending queue |
| CVE-2026-74433 | 9.8 CRITICAL | rxrpc: Fix UAF in rxgk_issue_challenge() |
| CVE-2026-72473 | 9.8 CRITICAL | xprtrdma: Decouple req recycling from RPC completion |
| CVE-2026-72472 | 9.8 CRITICAL | nfs: use nfsi->rwsem to protect traversal of the file lock list |
| CVE-2026-74545 | 9.8 CRITICAL | rtase: fix double free of multi-frag skb on DMA map failure |
| CVE-2026-72322 | 9.8 CRITICAL | ipv6: mcast: Fix potential UAF in MLD delayed work |
Showing 20 of 845 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-74583
net/sched: cls_route: fix fastmap use-after-free on filter - CVE-2026-74581
net: ipv6: clear suppressed fib6 rule result - CVE-2026-74582
packet: use consistent hard_header_len in non-ring send path - CVE-2026-74580
vhost: reset the vring metadata cache on vring reconfigurati - CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off
同じベンダー: Linux
- CVE-2026-74583
net/sched: cls_route: fix fastmap use-after-free on filter - CVE-2026-74581
net: ipv6: clear suppressed fib6 rule result - CVE-2026-74582
packet: use consistent hard_header_len in non-ring send path - CVE-2026-74580
vhost: reset the vring metadata cache on vring reconfigurati - CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off
V. CVE-2026-74355へのコメント
まだコメントはありません