Hoch 7.1Linux-Server
CVE-2026-98136
Linux Kernel: Mehrere Schwachstellen
Debian Linux, Amazon Linux 2, Red Hat Enterprise Linux, RESF Rocky Linux, SUSE Linux, SUSE openSUSE, Ubuntu Linux…
In the Linux kernel, the following vulnerability has been resolved: ntfs: bound $AttrDef table walk to the loaded table size ntfs_attr_find_in_attrdef() walks the in-memory $AttrDef table, but the loop condition bounds only the start of each entry, not the whole entry: for (ad = vol->attrdef; (u8 *)ad - (u8 *)vol->attrdef attrdef_size && ad->type; ++ad) struct attr_def is 160 bytes; the guard reads ad->type at offset 128 and the loop body reads further fields. vol->attrdef…
25. Sep 2026
Original bei CERT-Bund öffnen