IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.1Hoch

CVE-2026-46243smb: client: reject userspace cifs.spnego descriptions

Linux Linux; Red Hat NVIDIA for RHEL 10; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support Veröffentlicht: (vor 5 Monaten)

Beschreibung

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authority-bearing fields such as pid, uid, creduid, and upcall_target that cifs.upcall treats as kernel-originating inputs. However, userspace can also create keys of this type through request_key(2) or add_key(2), allowing those fields to be supplied without CIFS origin. Only accept cifs.spnego descriptions while CIFS is using its private spnego_cred to request the key.

Schwachstellentyp (CWE): CWE-20CWE-825

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
enterprise linux 8 —
enterprise linux nvidia 10 —
Linux Linux 2.6.24
linux linux kernel 2.6.24 – < 5.10.258
openshift 4.12 —
openshift 4.13 —
openshift 4.14 —
openshift 4.15 —
openshift 4.16 —
openshift 4.17 —
openshift 4.18 —
openshift 4.19 —
openshift 4.20 —
openshift 4.21 —
Red Hat NVIDIA for RHEL 10 all versions
Red Hat Red Hat Enterprise Linux 10 all versions
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support all versions
Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION all versions
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support all versions
Red Hat Red Hat Enterprise Linux 8 all versions
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support all versions
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On all versions
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support all versions
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On all versions
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service all versions
Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 9 all versions
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions all versions
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support all versions
Red Hat Red Hat OpenShift Container Platform 4.12 all versions
Red Hat Red Hat OpenShift Container Platform 4.13 all versions
Red Hat Red Hat OpenShift Container Platform 4.14 all versions
Red Hat Red Hat OpenShift Container Platform 4.15 all versions
Red Hat Red Hat OpenShift Container Platform 4.16 all versions
Red Hat Red Hat OpenShift Container Platform 4.17 all versions
Red Hat Red Hat OpenShift Container Platform 4.18 all versions
Red Hat Red Hat OpenShift Container Platform 4.19 all versions
Red Hat Red Hat OpenShift Container Platform 4.20 all versions
Red Hat Red Hat OpenShift Container Platform 4.21 all versions
rhel e4s 9.2 —
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 0

Referenzen und Patches

CPE-Treffer (NVD) (18)
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 2.6.24.1 < 5.10.258
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.11 < 5.15.209
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 5.16 < 6.1.175
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.2 < 6.6.142
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.7 < 6.12.92
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.13 < 6.18.34
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* ≥ 6.19 < 7.0.11
  • cpe:2.3:o:linux:linux_kernel:2.6.24:-:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:2.6.24:rc6:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:2.6.24:rc7:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:2.6.24:rc8:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*

Neue CVEs im selben Produkt — Linux kernel

8.1Hoch
CVE-2026-99270

tcp: Fix potential UAF in reqsk_timer_handler().

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler(). When TCP socket migration fails at inet_ehash_insert() in reqsk_timer_handler(), we jump to the no_ownership: label and free the new reqsk i…

Ohne Score
CVE-2026-99260

ntfs: fix resident conversion in ntfs_new_attr_flags

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix resident conversion in ntfs_new_attr_flags When setting sparse/compressed flags on a resident attribute, the function skipped the resident-to-non-resident conversion and terminated.

Ohne Score
CVE-2026-99256

dm cache: fix issue with background work locking

Linux Linux

In the Linux kernel, the following vulnerability has been resolved: dm cache: fix issue with background work locking dm cache used a rw_semaphore for background_work_lock. Write locks on rw_semaphores have strict owner semantics, but there was no guarantee …