CVE-2026-74396— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 8
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | 1efe8c0670d6a6883faa09c9abc746c741f5664a< ffa85a2c197935ace6f1634ad9eb0a44bc615670 | affected |
1efe8c0670d6a6883faa09c9abc746c741f5664a< 9619909d4869afe720904c6888a289b9ac3055b8 | affected | ||
1efe8c0670d6a6883faa09c9abc746c741f5664a< 1eae35b37923cb71b0cb5136d00671440d488b9f | affected | ||
6.16 | affected | ||
< 6.16 | unaffected | ||
6.18.40≤ 6.18.* | unaffected | ||
7.1.5≤ 7.1.* | unaffected | ||
7.2≤ * | unaffected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-74396の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure mlx5r_umr_update_xlt() allocates and DMA maps an XLT buffer with mlx5r_umr_create_xlt(). The buffer is released by the common cleanup path through mlx5r_umr_unmap_free_xlt(). After mlx5_odp_populate_xlt() became fallible, its error path returned directly and skipped that cleanup. This leaks the XLT DMA mapping and buffer. If the emergency XLT page was used, it also leaves xlt_emergency_page_mutex locked. Break out of the loop so execution falls through the existing cleanup path.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel 6.16版本存在安全漏洞，该漏洞源于mlx5_odp_populate_xlt()失败时错误路径直接返回，跳过XLT缓冲区清理，导致DMA映射和缓冲区泄漏，并可能使紧急XLT页互斥锁保持锁定，可能导致拒绝服务攻击。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2026-74396の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-74396のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-74396 补丁与修复 (3)
Same Patch Batch · Linux · 2026-08-15 · 845 CVEs total
| CVE-2026-74309 | 10.0 CRITICAL | vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler |
| CVE-2026-74280 | 10.0 CRITICAL | crypto: marvell/octeontx - fix DMA cleanup using wrong loop index |
| CVE-2026-74279 | 10.0 CRITICAL | crypto: cavium/cpt - fix DMA cleanup using wrong loop index |
| CVE-2026-72407 | 10.0 CRITICAL | geneve: validate inner network offset in geneve_gro_complete() |
| CVE-2026-72408 | 10.0 CRITICAL | geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint |
| CVE-2026-74475 | 10.0 CRITICAL | vxlan: use neigh_ha_snapshot() in route_shortcircuit() |
| CVE-2026-72421 | 10.0 CRITICAL | ipv4: fib: Don't ignore error route in local/main tables. |
| CVE-2026-72493 | 9.9 CRITICAL | net: serialize netif_running() check in enqueue_to_backlog() |
| CVE-2026-74376 | 9.8 CRITICAL | md/raid10: reset read_slot when reusing r10bio for discard |
| CVE-2026-72234 | 9.8 CRITICAL | batman-adv: access unicast_ttvn skb->data only after skb realloc |
| CVE-2026-72339 | 9.8 CRITICAL | qede: fix off-by-one in BD ring consumption on build_skb failure |
| CVE-2026-74255 | 9.8 CRITICAL | tipc: fix UAF in tipc_l2_send_msg() |
| CVE-2026-72064 | 9.8 CRITICAL | net: mana: Sync page pool RX frags for CPU |
| CVE-2026-72065 | 9.8 CRITICAL | net: mana: Validate the packet length reported by the NIC |
| CVE-2026-72217 | 9.8 CRITICAL | SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing |
| CVE-2026-74473 | 9.8 CRITICAL | vxlan: use pskb_network_may_pull() in route_shortcircuit() |
| CVE-2026-72323 | 9.8 CRITICAL | ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() |
| CVE-2026-74495 | 9.8 CRITICAL | igbvf: Fix leak in TX DMA error cleanup |
| CVE-2026-72463 | 9.8 CRITICAL | xfrm: Fix dev use-after-free in xfrm async resumption |
| CVE-2026-72069 | 9.8 CRITICAL | locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() |
Showing 20 of 845 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
同じベンダー: Linux
- CVE-2026-74579
netfilter: nft_payload: fix mask build for partial field off - CVE-2026-74578
crypto: algif_skcipher - force synchronous processing on tre - CVE-2026-74577
net: mpls: initialize rtm_tos in mpls_getroute() - CVE-2026-74576
mm/slab: prevent unbounded recursion in free path with new k - CVE-2026-74574
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev
V. CVE-2026-74396へのコメント
まだコメントはありません