Kernel: local_bh imbalance in seg6_input_core() drop path (incomplete fix for cve-2026-46099)

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a local_bh imbalance in seg6_input_core(), where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of service on systems with SRv6 tunnels configured. Upstream and RHEL 10 are not affected.

Etkilenen sürümler7 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• bugzilla.redhat.com/show_bug.cgi Üçüncü taraf
• access.redhat.com/security/cve/CVE-2026-118593 Diğer

Kayıt geçmişi

1. 30 Eki 2026 09:41Yayımlandı

İlgili açıklar

• 7,8 CVE-2026-119528Gimp: gimp: stack buffer overflow in psd image resource header loader
• 3,7 CVE-2026-115456Gcc: out-of-bounds read in std::from_chars
• 6,5 CVE-2026-115455Gcc: stack overflow in std::bitset on libstdc++
• 5,9 CVE-2026-114691Gcc: integer wrap in `std
• 6,2 CVE-2026-114690Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std
• 7,5 CVE-2026-103963Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service