DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Linux Kernel: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-03-31
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um nicht näher spezifizierte Angriffe durchzuführen, darunter möglicherweise Codeausführung, Denial-of-Service-Angriffe, die Umgehung von Sicherheitsmaßnahmen oder die Manipulation von Daten.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-23411US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix race between freeing data and fs accessing it
AppArmor was putting the reference to i_private da… | ||||
| CVE-2026-23410US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix race on rawdata dereference
There is a race condition that leads to a use-after-free situation:… | ||||
| CVE-2026-23409US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix differential encoding verification
Differential encoding allows loops to be created if it is abu… | ||||
| CVE-2026-23408US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
apparmor: Fix double free of ns_name in aa_replace_profiles()
if ns_name is NULL after
1071 error = aa… | ||||
| CVE-2026-23407US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
The verify_dfa() function only checks DEFA… | ||||
| CVE-2026-23406US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix side-effect bug in match_char() macro usage
The match_char() macro evaluates its character param… | ||||
| CVE-2026-23405US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix: limit the number of levels of policy namespaces
Currently the number of policy namespaces is no… | ||||
| CVE-2026-23404US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
apparmor: replace recursive profile removal with iterative approach
The profile removal code uses recursion wh… | ||||
| CVE-2026-23403US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
apparmor: fix memory leak in verify_header
The function sets `*ns = NULL` on every call, leaking the namespace… | ||||
| CVE-2026-23402US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE
Adjust KVM's sanity check against… | ||||
| CVE-2026-23401US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE
When installing an emulated MMIO… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Oracle Linux Security Advisory ELSA-2026-13577 vom 2026-05-07external
- Oracle Linux Security Advisory ELSA-2026-50372 vom 2026-07-07external
- Red Hat Security Advisory RHSA-2026:13577 vom 2026-05-05external
- Red Hat Security Advisory RHSA-2026:13578 vom 2026-05-05external
- Red Hat Security Advisory RHSA-2026:13932 vom 2026-05-06external
- Red Hat Security Advisory RHSA-2026:13936 vom 2026-05-06external
- Red Hat Security Advisory RHSA-2026:14137 vom 2026-05-06external
- Red Hat Security Advisory RHSA-2026:14230 vom 2026-05-06external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan