Threats Tagged 'cve-2026-53089'

SUSE Linux Enterprise 12 SP5 kernel received a security update addressing multiple vulnerabilities across various kernel components including drm, timers, netfilter, Bluetooth, media, ACPI, powerpc, TPM, RAID, IPMI, BPF, networking, and others. These fixes resolve issues such as race conditions, NULL pointer dereferences, use-after-free, buffer overflows, and validation errors. The update mitigates a broad range of security risks affecting kernel stability and security.

A use-after-free vulnerability in the Linux kernel's BPF subsystem was resolved. The issue occurs when querying info for an offloaded BPF map or program, where a network namespace reference count may be incorrectly incremented after reaching zero, causing a use-after-free condition. The flaw arises because get_net() increments a refcount on zero, leading to memory corruption. The fix replaces get_net() with maybe_get_net(), which safely checks the refcount before incrementing and returns an error if the namespace is being destroyed.

A use-after-free vulnerability in the Linux kernel's BPF subsystem was fixed. The issue occurs when querying information for offloaded BPF maps or programs, where a network namespace reference count may reach zero during destruction, causing a use-after-free condition. The fix replaces get_net() with maybe_get_net() to safely handle network namespace reference counts. This vulnerability affects multiple Linux kernel versions prior to 7.0.0-28.28 and related builds. A patch is available and should be applied to mitigate the issue.