一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月18日

CVE-2026-92477 – In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: debugfs: R

未分类
📑 文章目录

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: debugfs: Reserve space for a string terminator

ufs_saved_err_write() copies user input into a zero-initialized stack
buffer and passes it to kstrtoint(). A write that fills the entire buffer
overwrites its only terminator.

Reject an input whose length leaves no room for the trailing NUL.