7.3
Élevée
CVE-2026-23236 In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: properly copy ioctl memory to…
Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: properly copy ioctl memory to kernelspace The UFX_IOCTL_REPORT_DAMAGE ioctl does not properly copy data from userspace to kernelspace, and instead directly references the memory, which can cause problems if invalid data is passed from userspace. Fix this all up by correctly copying the memory before accessing it within the kernel.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 7.0 | premières → < 7.0 | 7.0 |
| Linux 6.19 | premières → < 6.19.3 | 6.19.3 |
| Linux 6.18 | premières → < 6.18.13 | 6.18.13 |
| Linux 6.12 | premières → < 6.12.74 | 6.12.74 |
| Linux 6.6 | premières → < 6.6.127 | 6.6.127 |
| Linux 6.1 | premières → < 6.1.164 | 6.1.164 |
| Linux 5.15 | premières → < 5.15.201 | 5.15.201 |
| Linux 5.10 | premières → < 5.10.251 | 5.10.251 |
| Linux | 3.2 | Pas de correctif indiqué |
Afficher l’autre branche Masquer l’autre branche
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RUGGEDCOM RST2428P 4.0 | premières → < 4.0 | 4.0 |
Autres CVE de Linux
Les 18300 CVE de Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Non notée
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Non notée
CVE-2026-99282
net/sched: sch_teql: fix use-after-free on lower qdisc drop
Non notée
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Non notée