CVE-2026-90141

Katalog CVE

CVSS 7.3 · High EPSS 0,45%

Skor CVSS 3.1 7.3 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/address parsing ip_vs_ftp_get_addrport() accumulates decimal digits into a __u16 (hport) and into unsigned char (p[]) without checking for overflow. A crafted FTP PASV/EPSV response with an over-long port or address octet wraps the value, so the helper configures the data connection with a truncated port/address. The netfilter conntrack FTP helper had the same defect, fixed in commit 2b413fc689ba ("netfilter: nf_conntrack_ftp: avoid u16 overflows"). Apply the equivalent fix here: widen the port accumulator to u32 and reject values above 65535, and reject address octets above 255.

Rincian

Terbit di NVD

17 September 2026

Terakhir diubah

18 September 2026

Status NVD

Received

CVSS 3.1

7.3 (High), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

EPSS (30 hari)

0,45% peluang dieksploitasi; lebih tinggi dari 36,9% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/00bcc6d679262ea42688fba1d7819ea6e56f12ef
• https://git.kernel.org/stable/c/4aed450adaee3a021db27be94c61fe025b0d05ff
• https://git.kernel.org/stable/c/50cb9b7263a2ed01f7d2f97818a800c2ee05f661
• https://git.kernel.org/stable/c/b1908bff0faaa94d55be72da65879cad632e8236
• https://git.kernel.org/stable/c/d02de9a7a7e2484da0cf37e50614840623b98a62
• https://git.kernel.org/stable/c/deaa88fa010ba0dfc554d09e006ddd1ce9945c82
• https://git.kernel.org/stable/c/e625a9477d12baaff4025c5f9989184a907ea8fc
• https://git.kernel.org/stable/c/fc1493c905d7e0bc8830c1d83915cb7831daf1a1