Angol zászló
Sérülékenységek

CVE-2026-43284

Linux Linux

Adatlap

CVE
CVE-2026-43284
EUVD
EUVD-2026-28535
Eszköztípus
IT +ICS
Publikálva
Frissítve
Súlyosság
Magas
Prioritás
Kiemelt
CWE
CWE-123

CVSS-pontszámok

Verzió Pontszám Súlyosság Vektor
3.1 8,8 Magas CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
3.1 7,8 Magas CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
3.1 7,8 Magas CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Eredeti leírás

In the Linux kernel, the following vulnerability has been resolved:

xfrm: esp: avoid in-place decrypt on shared skb frags

MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP
marks such skbs with SKBFL_SHARED_FRAG after skb_splice_from_iter(),
so later paths that may modify packet data can first make a private
copy. The IPv4/IPv6 datagram append paths did not set this flag when
splicing pages into UDP skbs.

That leaves an ESP-in-UDP packet made from shared pipe pages looking
like an ordinary uncloned nonlinear skb. ESP input then takes the no-COW
fast path for uncloned skbs without a frag_list and decrypts in place
over data that is not owned privately by the skb.

Mark IPv4/IPv6 datagram splice frags with SKBFL_SHARED_FRAG, matching
TCP. Also make ESP input fall back to skb_cow_data() when the flag is
present, so ESP does not decrypt externally backed frags in place.
Private nonlinear skb frags still use the existing fast path.

This intentionally does not change ESP output. In esp_output_head(),
the path that appends the ESP trailer to existing skb tailroom without
calling skb_cow_data() is not reachable for nonlinear skbs:
skb_tailroom() returns zero when skb->data_len is nonzero, while ESP
tailen is positive. Thus ESP output will either use the separate
destination-frag path or fall back to skb_cow_data().

Érintett termékek

  • Linux Linux Verziók: cac2661c53f35cbe651bef9b07026a5a05ab8ce0 – < a6cb440f274a22456ef3e86b457344f1678f38f9; cac2661c53f35cbe651bef9b07026a5a05ab8ce0 – < ab8b995323e5237041472d07e5055f5f7dcdf15b; cac2661c53f35cbe651bef9b07026a5a05ab8ce0 – < fe785bb3a8096dffcc4048a85cd0c83337ee, 4.11; 0 – < 4.11; 5.10.255 – <= 5.10.*; 5.15.205 – <= 5.15.*; 5.15.206 – <= 5.15.*; 6.1.171 – <= 6.1.*; 6.1.172 – <= 6.1.*; 6.6.138 – <= 6.6.*; 6.12.87 – <= 6.12.*; 6.18.28 – <= 6.18.*; 7.0.5 – <= 7.0.*; 7.1 – <= *

Beszállítói termékekben is érintett

A CVE-rekord beszállítói kiegészítése szerint ezek a termékek beépítve tartalmazzák az érintett komponenst.

A beszállítói termékek megjelenítése (31 tétel)
  • NVIDIA for RHEL 10 Red Hat Verziók: 0:6.12.0-211.7.el10nv – < *; 0:6.12.0-231.12.el10nv – < *
  • Red Hat Enterprise Linux 10 Red Hat Verziók: 0:6.12.0-124.56.1.el10_1 – < *; 0:6.12.0-211.16.1.el10_2 – < *; 0:6.12.0-211.7.3.el10_2 – < *
  • Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat Verziók: 0:6.12.0-55.73.1.el10_0 – < *
  • Red Hat Enterprise Linux 8 Red Hat Verziók: 0:4.18.0-553.124.1.rt7.465.el8_10 – < *, 0:4.18.0-553.124.1.el8_10 – < *
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Verziók: 0:4.18.0-305.191.1.el8_4 – < *
  • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On Red Hat Verziók: 0:4.18.0-305.191.1.el8_4 – < *
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Verziók: 0:4.18.0-372.192.1.el8_6 – < *
  • Red Hat Enterprise Linux 8.6 Telecommunications Update Service Red Hat Verziók: 0:4.18.0-372.192.1.el8_6 – < *
  • Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions Red Hat Verziók: 0:4.18.0-372.192.1.el8_6 – < *
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat Verziók: 0:4.18.0-477.140.1.el8_8 – < *
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions Red Hat Verziók: 0:4.18.0-477.140.1.el8_8 – < *
  • Red Hat Enterprise Linux 9 Red Hat Verziók: 0:5.14.0-611.55.1.el9_7 – < *; 0:5.14.0-687.10.1.el9_8 – < *; 0:5.14.0-687.5.3.el9_8 – < *
  • Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Red Hat Verziók: 0:5.14.0-70.179.1.el9_0 – < *, 0:5.14.0-70.179.1.rt21.251.el9_0 – < *
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Red Hat Verziók: 0:5.14.0-284.170.1.el9_2 – < *, 0:5.14.0-284.170.1.rt14.455.el9_2 – < *
  • Red Hat Enterprise Linux 9.4 Extended Update Support Red Hat Verziók: 0:5.14.0-427.125.1.el9_4 – < *
  • Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat Verziók: 0:5.14.0-570.113.1.el9_6 – < *
  • Red Hat OpenShift Container Platform 4.12 Red Hat Verziók: 412.86.202605111404-0 – < *; 412.86.202605271418-0 – < *
  • Red Hat OpenShift Container Platform 4.13 Red Hat Verziók: 413.92.202606160406-0 – < *
  • Red Hat OpenShift Container Platform 4.14 Red Hat Verziók: 414.92.202605111427-0 – < *
  • Red Hat OpenShift Container Platform 4.15 Red Hat Verziók: 415.92.202606030318-0 – < *
  • Red Hat OpenShift Container Platform 4.16 Red Hat Verziók: 416.94.202605101426-0 – < *
  • Red Hat OpenShift Container Platform 4.17 Red Hat Verziók: 417.94.202606250942-0 – < *
  • Red Hat OpenShift Container Platform 4.18 Red Hat Verziók: 418.94.202605101521-0 – < *
  • Red Hat OpenShift Container Platform 4.19 Red Hat Verziók: 4.19.9.6.202605110225-0 – < *
  • Red Hat OpenShift Container Platform 4.20 Red Hat Verziók: 4.20.9.6.202605110206-0 – < *
  • Red Hat OpenShift Container Platform 4.21 Red Hat Verziók: 4.21.9.6.202605110143-0 – < *
  • Red Hat Enterprise Linux 6 Red Hat
  • Red Hat Enterprise Linux 7 Red Hat
  • SIMATIC S7-1500 CPU 1518-4 PN/DP MFP Siemens Verziók: V3.1.6 – < V3.1.7, V3.1.5 – < *
  • SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP Siemens Verziók: V3.1.6 – < V3.1.7, V3.1.5 – < *
  • SIPLUS S7-1500 CPU 1518-4 PN/DP MFP Siemens Verziók: V3.1.6 – < V3.1.7, V3.1.5 – < *

Prioritás

Szint
Kiemelt
Teendő
Soron kívüli intézkedés javasolt: a szoftvert 72 órán belül frissítse. A javításig kísérje figyelemmel a sérülékenység kihasználására utaló jeleket, és ha elérhető, alkalmazza a gyártó által javasolt kerülő megoldást.

Kihasználási státusz

EPSS
94,19%
Kihasználtság
PoC
Automatizálhatóság
Nem
Technikai hatás
Teljes

Javítás

Javított verzió
5.10.255, 5.15.205, 5.15.206, 6.1.171, 6.1.172, 6.6.138, 6.12.87, 6.18.28, 7.0.5, 7.1, 0:6.12.0-211.7.el10nv, 0:6.12.0-231.12.el10nv, 0:6.12.0-124.56.1.el10_1, 0:6.12.0-211.16.1.el10_2, 0:6.12.0-211.7.3.el10_2, 0:6.12.0-55.73.1.el10_0, 0:4.18.0-553.124.1.rt7.465.el8_10, 0:4.18.0-553.124.1.el8_10, 0:4.18.0-305.191.1.el8_4, 0:4.18.0-372.192.1.el8_6
+22 további 0:4.18.0-477.140.1.el8_8, 0:5.14.0-611.55.1.el9_7, 0:5.14.0-687.10.1.el9_8, 0:5.14.0-687.5.3.el9_8, 0:5.14.0-70.179.1.el9_0, 0:5.14.0-70.179.1.rt21.251.el9_0, 0:5.14.0-284.170.1.el9_2, 0:5.14.0-284.170.1.rt14.455.el9_2, 0:5.14.0-427.125.1.el9_4, 0:5.14.0-570.113.1.el9_6, 412.86.202605111404-0, 412.86.202605271418-0, 413.92.202606160406-0, 414.92.202605111427-0, 415.92.202606030318-0, 416.94.202605101426-0, 417.94.202606250942-0, 418.94.202605101521-0, 4.19.9.6.202605110225-0, 4.20.9.6.202605110206-0, 4.21.9.6.202605110143-0, V3.1.7
Gyártói hivatkozás
Van patch vagy gyártói közlemény a hivatkozások között

Megoldás (CNA)

RHSA-2026:17795: NVIDIA for RHEL 10

RHSA-2026:33486: NVIDIA for RHEL 10

RHSA-2026:16180: Red Hat OpenShift Container Platform 4.12

RHSA-2026:21695: Red Hat OpenShift Container Platform 4.12

RHSA-2026:26542: Red Hat OpenShift Container Platform 4.13

RHSA-2026:16176: Red Hat OpenShift Container Platform 4.14

RHSA-2026:23233: Red Hat OpenShift Container Platform 4.15

RHSA-2026:16171: Red Hat OpenShift Container Platform 4.16

RHSA-2026:34098: Red Hat OpenShift Container Platform 4.17

RHSA-2026:16160: Red Hat OpenShift Container Platform 4.18

RHSA-2026:16161: Red Hat OpenShift Container Platform 4.19

RHSA-2026:16157: Red Hat OpenShift Container Platform 4.20

RHSA-2026:16155: Red Hat OpenShift Container Platform 4.21

RHSA-2026:16314: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0), Red Hat Enterprise Linux Real Time EUS (v. 10.0), Red Hat Enterprise Linux Real Time for NFV EUS (v. 10.0)

RHSA-2026:16062: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)

RHSA-2026:19569: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)

RHSA-2026:19074: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10), Red Hat Enterprise Linux Real Time (v. 10), Red Hat Enterprise Linux Real Time for NFV (v. 10)

RHSA-2026:16202: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)

RHSA-2026:16328: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)

RHSA-2026:16100: Red Hat CodeReady Linux Builder EUS (v.9.4), Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4), Red Hat Enterprise Linux Real Time EUS (v.9.4), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4)

RHSA-2026:16312: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6), Red Hat Enterprise Linux Real Time EUS (v.9.6), Red Hat Enterprise Linux Real Time for NFV EUS (v.9.6)

RHSA-2026:16206: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)

RHSA-2026:19568: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)

RHSA-2026:19225: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9), Red Hat Enterprise Linux Real Time (v. 9), Red Hat Enterprise Linux Real Time for NFV (v. 9)

RHSA-2026:16195: Red Hat Enterprise Linux BaseOS (v. 8), Red Hat Enterprise Linux CRB (v. 8)

RHSA-2026:19574: Red Hat Enterprise Linux BaseOS (v. 8)

RHSA-2026:16201: Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)

RHSA-2026:16204: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)

RHSA-2026:19564: Red Hat Enterprise Linux BaseOS E4S (v.8.6)

RHSA-2026:16061: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)

RHSA-2026:19572: Red Hat Enterprise Linux BaseOS E4S (v.8.8)

RHSA-2026:19575: Red Hat Enterprise Linux BaseOS E4S (v.9.0)

RHSA-2026:19573: Red Hat Enterprise Linux BaseOS E4S (v.9.2)

RHSA-2026:19577: Red Hat Enterprise Linux BaseOS EUS (v.9.4)

RHSA-2026:18025: Red Hat Enterprise Linux BaseOS EUS (v.9.6)

RHSA-2026:16196: Red Hat Enterprise Linux NFV (v. 8), Red Hat Enterprise Linux RT (v. 8)

RHSA-2026:16203: Red Hat Enterprise Linux NFV E4S (v.9.0), Red Hat Enterprise Linux Real Time E4S (v.9.0)

RHSA-2026:16254: Red Hat Enterprise Linux Real Time E4S (v.9.2), Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2)

Kerülő megoldás (CNA)

See the security bulletin for a detailed mitigation procedure.

Hivatkozások