网安资讯详情 - SecLens 情报雷达

CVE-2026-46331

来源： alibaba_cloud_linux_cve · 发布时间 2026-07-24 17:46 (UTC+08:00) · 抓取时间 2026-07-24 18:10 (UTC+08:00)

原文链接

摘要

In the Linux kernel, the following vulnerability has been resolved:net/sched: fix pedit partial COW leading to page cache corruptiontcf_pedit_act() computes the COW range for skb_ensure_writable()once before the key loop using tcfp_off_max_hint, but the hint doesnot account for the runtime header offset added by typed keys. Thiscan leave part of the write region un-COW'd.Fix by moving skb_ensure_writable() inside the per-key loop wherethe actual write offset is known, and add overflow checking on theoffset arithmetic. For negative offsets (e.g. Ethernet header editsat ingress), use skb_cow() to COW the headroom instead. Guardoffset_valid() against INT_MIN, where negation is undefined.

标签

• cve:cve-2026-46331
• type:cve
• vendor:alibaba

扩展字段

{
  "cve_id": "CVE-2026-46331",
  "raw_pub_date": "Fri, 24 Jul 2026 17:46:41 +0800"
}