CVE-2026-31431-mitigacion

CVE-2026-31431 — 完全な技術分析 分類: ローカル権限昇格 LPE — Linuxカーネル CVSS: 7.8 高 影響: 権限のないユーザー → root 影響を受けるモジュール: algifaead カーネルのAFALGサブシステム 目次 1. なぜ脆弱なのか? 2. 影響を受けるバージョンは? 3. 悪用方法 4. 緩和策 1. なぜ脆弱なのか? AFALGサブシステム Linuxカーネルは、AFALG ソケットファミリー AFALG...

c-copy-fail

CopyFail Linux 内核加密 API 中的 CVE-2026-31431 资源： 主 网站 aarch64 系统调用 用于生成 shell 代码 的 pwntools sendmsg 中辅助数据的工作原理...

CVE-2026-31431

CVE-2026-31431 コピー失敗 - CVE-2026-31431 詳細 https://nvd.nist.gov/vuln/detail/CVE-2026-31431 https://copy.fail/exploit https://xint.io/blog/copy-fail-linux-distributions テスト済みディストリ / バージョン ディストリ| バージョン ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1|...

pppoeject

PPPoEject — LinuxカーネルPPPoE use-after-free追跡サイト PPPoEject パッチステータストラッカーのソース: LinuxカーネルにおけるPPPoE sendmsgのstale skb-head use-after-freeに対する修正をどのディストリビューションが出荷したかを記録するシングルページサイト。 事実が存在する場所 バグに関するすべて — CVE ID、影響を受けるバージョンと修正済みバージョン、アップストリームの修正コミット、発見および開示のクレジット、現在のディストリビューションごとのパッチステータス —...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg – Fix NULL pointer dereference in scatterwalk The AFALG interface fails to unmark the end of a Scatter/Gather List SGL when chaining a new afalgtsgl structure. If a sendmsg function fills an SGL exactly up to...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: IB/hfi1: Fixed the “off-by-one” error in sdma.h’s tx-numdescs. Unfortunately, the commit fd8958efe877 introduced another error, causing the descp array to overflow. This leads to further crashes that can be easily reproduced...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: kcm: Fixed error handling for SOCKDGRAM in kcmsendmsg. Syzkaller identified a memory leak in kcmsendmsg, and the commit c821a88bd720 "kcm: Fix memory leak in the error path of kcmsendmsg" suppressed this issue by updating...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: ipv4, ipv6: Fixed the handling of transhdrlen in ip,6appenddata. Including transhdrlen in the packet length is a problem when the packet is partially filled e.g., a sendMSGMORE operation occurred previously when appending to a...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: kcm: Serializing kcmsendmsg for the same socket. syzkaller reported a Use-After-Free in kcmrelease. 0 The scenario is as follows: 1. Thread A constructs a skb with MSGMORE and sets kcm-seqskb. 2. Thread A continues to construc...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fixed an issue of signed integer overflow in l2tpip6sendmsg. When len = INTMAX - transhdrlen, the value of ulen = len + transhdrlen will cause an overflow. To address this issue, we can follow the approach used by udpv6 and...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: - rxrpc: Fixed the locking mechanism in rxrpc’s sendmsg function. - Three bugs were fixed in the implementation of rxrpc’s sendmsg function: 1 The rxrpcnewclientcall function should release the socket lock when returning an...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: rds: ib: Reject FRMR registration before IB connection is established. The rdsibgetmr function extracts the rdsibconnection from conn-ctransportdata and passes it to rdsibregfrmr for FRWR memory registration. In a newly...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: llc: Makes llcuisendmsg more robust against changes to bonding. syzbot was able to exploit llcuisendmsg, allocating a skb without sufficient headroom, and then attempting to append 14 bytes of Ethernet header information. Like...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: atm: clip: Fixed NULL pointer dereferencing in vccsendmsg atmarpddevops does not implement the send method, which may cause crashes as described below. BUG: NULL pointer dereferencing in the kernel, address: 0000000000000000 P...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: bpf, sockmap: Fixed a memory leak in tcpbpfsendmsg when skmsg is full. If tcpbpfsendmsg is running while skmsg is full, and skmsgalloc returns an -ENOMEM error, tcpbpfsendmsg will enter a waitformemory state. If part of the...

CVE-2026-90564

A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the component chat sendMsg Endpoint. Such manipulation of the argument chatmsg leads to cross site scripting. The attack...

EUVD-2026-77038

A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the component chat sendMsg Endpoint. Such manipulation of the argument chatmsg leads to cross site scripting. The attack...

CVE-2026-90564 quequnlong shiyi-blog chat sendMsg Endpoint index.vue SysChatMsgMapper.getChatMsgList cross site scripting

A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the component chat sendMsg Endpoint. Such manipulation of the argument chatmsg leads to cross site scripting. The attack...

CVE-2026-90564

CVE-2026-90564 is a cross-site scripting (XSS) vulnerability affecting quequnlong shiyi-blog versions 1.0.0 through 1.2.1 . The flaw resides in the function SysChatMsgMapper.getChatMsgList within the file blog-web/src/views/chat/index.vue , specifically in the chat sendMsg Endpoint . Manipulating...

PT-2026-90869

A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.vue of the component chat sendMsg Endpoint. Such manipulation of the argument chat msg leads to cross site scripting. The attack...