CVE-2026-72018

CVE-2026-72018 — Linux 内核越界写入 Linux 内核 • DIBS 回环 • 越界写入 CVE-2026-72018 的安全研究与技术分析。 01 — 概述 CVE-2026-72018 是一个影响 DIBS/ISM 回环功能的 Linux 内核越界写入 漏洞。 该漏洞与传入已注册 DMB（数据内存缓冲区） 的数据处理有关。 受影响的实现未在执行内存操作之前充分验证所提供的偏移量、传输大小与实际 DMB 边界之间的关系。 漏洞分类 属性| 值 ---|--- CVE| CVE-2026-72018 CWE| CWE-787 — 越界写入 CVSS v3.1| 7....

SUSE CVE-2026-72018

In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in movedata The loopback movedata performs a memcpy into the registered DMB without checking whether offset + size exceeds the DMB length. Unlike real ISM hardware, which enforces memory...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: dibs: fixed the use-of-free condition in the loopback attach/detach/unregister process. dibsloattachdmb, dibslodetachdmb, and dibslounregisterdmb now look up the dmbnode under dmbhtlock, release the lock, and then operate on t...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in movedata The loopback version of movedata performs a memcpy operation into the registered DMB. This operation does not check whether the combined offset and size exceed the length of th...

CVE-2026-72018

In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in movedata The loopback movedata performs a memcpy into the registered DMB without checking whether offset + size exceeds the DMB length. Unlike real ISM hardware, which enforces memory...

EUVD-2026-59117

In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in movedata The loopback movedata performs a memcpy into the registered DMB without checking whether offset + size exceeds the DMB length. Unlike real ISM hardware, which enforces memory...

CVE-2026-72018 dibs: loopback: validate offset and size in move_data()

In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in movedata The loopback movedata performs a memcpy into the registered DMB without checking whether offset + size exceeds the DMB length. Unlike real ISM hardware, which enforces memory...