-

CVE-2026-89556

module: validate string table section types

In the Linux kernel, the following vulnerability has been resolved:

module: validate string table section types

In elf_validity_cache_sechdrs, section sizes and offsets are validated,
unless the section type is SHT_NULL or SHT_NOBITS.

Later, elf_validity_cache_secstrings and elf_validity_cache_index_str
access the section name table (.shstrtab) and symbol string table
(.strtab) headers without first ensuring that their types are
SHT_STRTAB. If a section type is SHT_NULL or SHT_NOBITS, sh_offset has
not been validated and may reference out-of-bounds memory when
dereferenced in elf_validity_cache_secstrings or
elf_validity_cache_strtab.

Validate that both string section headers are of type SHT_STRTAB before
caching them.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version c92aab819d56d51631f0484ed7af11d9d8ff4cb0
Version < 50d0aa7d25ba4bc3606f150cd69755068e79f97f
Status affected
Version c92aab819d56d51631f0484ed7af11d9d8ff4cb0
Version < e4496dda2c6d0acf7ba5fbce14a2723a8935ceee
Status affected
Version c92aab819d56d51631f0484ed7af11d9d8ff4cb0
Version < 9a5ff45689329835f874cefe5174e577d141d423
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.13
Status affected
Version 0
Version < 6.13
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.097
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/50d0aa7d25ba4bc3606f150cd69755068e79f97f
https://git.kernel.org/stable/c/e4496dda2c6d0acf7ba5fbce14a2723a8935ceee
https://git.kernel.org/stable/c/9a5ff45689329835f874cefe5174e577d141d423