De multiples vulnérabilités ont été découvertes dans le noyau Linux de Debian. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un déni de service.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Show details on source website

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Debian trixie versions ant\u00e9rieures \u00e0 6.12.90-2",
      "product": {
        "name": "Debian",
        "vendor": {
          "name": "Debian",
          "scada": false
        }
      }
    },
    {
      "description": "Debian bookworm versions ant\u00e9rieures \u00e0 6.1.174-1",
      "product": {
        "name": "Debian",
        "vendor": {
          "name": "Debian",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-43503",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43503"
    },
    {
      "name": "CVE-2026-46174",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46174"
    },
    {
      "name": "CVE-2026-46300",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
    },
    {
      "name": "CVE-2026-23171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23171"
    },
    {
      "name": "CVE-2026-43494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-43494"
    }
  ],
  "initial_release_date": "2026-05-29T00:00:00",
  "last_revision_date": "2026-05-29T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0666",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-05-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans le noyau Linux de Debian. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un d\u00e9ni de service.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans le noyau Linux de Debian",
  "vendor_advisories": [
    {
      "published_at": "2026-05-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Debian msg00216",
      "url": "https://lists.debian.org/debian-security-announce/2026/msg00216.html"
    },
    {
      "published_at": "2026-05-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Debian msg00206",
      "url": "https://lists.debian.org/debian-security-announce/2026/msg00206.html"
    },
    {
      "published_at": "2026-05-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Debian msg00217",
      "url": "https://lists.debian.org/debian-security-announce/2026/msg00217.html"
    }
  ]
}

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache\n\nMake sure resources are not improperly shared in the op cache and\ncause instruction corruption this way."
    }
  ],
  "id": "CVE-2026-46174",
  "lastModified": "2026-05-28T13:44:01.663",
  "metrics": {},
  "published": "2026-05-28T10:16:33.020",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/1cd85a19748b2407830376a5cbae5c0f126016e5"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/1e23b30a80b14e5764657401ee2cca030525ae8e"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/251497955f2314cd39d43191e81c6151dead4c7b"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/28f5ed477eef166d678d6966762cbc1de9b4f436"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/9109489cc8c34e50d15575a3d1ff82af586bc1aa"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/c21b90f77687075115d989e53a8ec5e2bb427ab1"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/f5bc3aef7df46eaaf423d7413ab8833f704ae576"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/ff6fc65b3bf73acc5ee71919154d830ad5431362"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Awaiting Analysis"
}

Show details on source website

{
  "affected": [],
  "aliases": [
    "CVE-2026-46174"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-05-28T10:16:33Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache\n\nMake sure resources are not improperly shared in the op cache and\ncause instruction corruption this way.",
  "id": "GHSA-xgq6-gg2m-2x7g",
  "modified": "2026-05-28T12:30:31Z",
  "published": "2026-05-28T12:30:31Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46174"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/1cd85a19748b2407830376a5cbae5c0f126016e5"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/1e23b30a80b14e5764657401ee2cca030525ae8e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/251497955f2314cd39d43191e81c6151dead4c7b"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/28f5ed477eef166d678d6966762cbc1de9b4f436"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9109489cc8c34e50d15575a3d1ff82af586bc1aa"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c21b90f77687075115d989e53a8ec5e2bb427ab1"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f5bc3aef7df46eaaf423d7413ab8833f704ae576"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ff6fc65b3bf73acc5ee71919154d830ad5431362"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-46174 x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46174.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache",
    "tracking": {
      "current_release_date": "2026-05-29T01:09:35.000Z",
      "generator": {
        "date": "2026-05-29T07:23:45.840Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-46174",
      "initial_release_date": "2026-05-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-05-29T01:09:35.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-46174",
      "notes": [
        {
          "category": "general",
          "text": "Linux",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "under_investigation": [
          "17084-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-46174 x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46174.json"
        }
      ],
      "title": "x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache"
    }
  ]
}