קטלוג CISA KEV
ניצול פעיל מאומת.
הפגיעות רשומה בקטלוג הפגיעויות המנוצלות (KEV) של CISA: תוקפים כבר מנצלים אותה בתקיפות אמיתיות. יש לטפל בה בעדיפות עליונה.
- שם
- Linux Kernel Out-of-Bounds Write Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
תיאור (מקור, אנגלית)
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
מוצרים מושפעים
linux: linux kernel; fedoraproject: fedora; netapp: h300e firmware; netapp: h300e; netapp: h300s firmware; netapp: h300s; netapp: h410c firmware; netapp: h410c; netapp: h410s firmware; netapp: h410s; netapp: h500e firmware; netapp: h500e; netapp: h500s firmware; netapp: h500s; netapp: h610c firmware
קישורים10
- git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/com… PatchVendor Advisory
- git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/com… PatchVendor Advisory
- bugzilla.redhat.com/show_bug.cgi?id=2063786 Issue TrackingPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=2063786 Issue TrackingPatchThird Party Advisory
- packetstormsecurity.com/files/166770/Linux-watch_queue-Filter-… ExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/166815/Watch-Queue-Out-Of-Bounds… ExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/166770/Linux-watch_queue-Filter-… ExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/166815/Watch-Queue-Out-Of-Bounds… ExploitThird Party AdvisoryVDB Entry
- security.netapp.com/advisory/ntap-20220429-0001/ Third Party Advisory
- security.netapp.com/advisory/ntap-20220429-0001/ Third Party Advisory
מדדים
- CVSS 3.1
-
7.8
HIGH
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 9% אחוזון 95 · נכון ל-2 בנובמבר 2026
- CWE
- CWE-787