Към съдържанието
Търсене

CVE-2026-31557: Linux, състезание за ресурс

7.5

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: nvmet: move async event work off nvmet-wq For target nvmet_ctrl_free() flushes ctrl->async_event_work. If nvmet_ctrl_free() runs on nvmet-wq, the flush re-enters workqueue completion for the same worker:- A. Async event work queued on nvmet-wq (prior to disconnect): nvmet_execute_async_event() queue_work(nvmet_wq, &ctrl->async_event_work) nvmet_add_async_event() queue_work(nvmet_wq, &ctrl->async_event_work) B. Full pre-work chain (RDMA CM path): nvmet_rdma_cm_handler() nvmet_rdma_queue_disconnect() __nvmet_rdma_queue_disconnect() queue_work(nvmet_wq, &queue->release_work) process_one_work() lock((wq_completion)nvmet-wq) <--------- 1st nvmet_rdma_release_queue_work() C. Recursive path (same worker): nvmet_rdma_release_queue_work() nvmet_rdma_free_queue() nvmet_sq_destroy() nvmet_ctrl_put() nvmet_ctrl_free() flush_work(&ctrl->async_event_work) __flush_work() touch_wq_lockdep_map() lock((wq_completion)nvmet-wq) <--------- 2nd Lockdep splat: ============================================ WARNING: possible recursive locking detected 6.19.0-rc3nvme+ #14 Tainted: G N -------------------------------------------- kworker/u192:42/44933 is trying to acquire lock: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x26/0x90 but task is already holding lock: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660 3 locks held by kworker/u192:42/44933: #0: ffff888118a00948 ((wq_completion)nvmet-wq){+.+.}-{0:0}, at: process_one_work+0x53e/0x660 #1: ffffc9000e6cbe28 ((work_completion)(&queue->release_work)){+.+.}-{0:0}, at: process_one_work+0x1c5/0x660 #2: ffffffff82d4db60 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x62/0x530 Wor

Засегнати продукти

  • Linux Linux: 8832cf922151e9dfa2821736beb0ae2dd3968b6e преди ede147a85d1d4c075d13ba190453d6b09ecbea37; 8832cf922151e9dfa2821736beb0ae2dd3968b6e преди a8a3fb2888e2c4fd5410a19ac1623cc78a2383ec; 8832cf922151e9dfa2821736beb0ae2dd3968b6e преди 49c7c50ee6325a084216e94395e067ecde8088fa; 8832cf922151e9dfa2821736beb0ae2dd3968b6e преди ca111c9d8d6c9d5735878d933a1716c4be86c2d1; 8832cf922151e9dfa2821736beb0ae2dd3968b6e преди 25ceffc1dabec3b93f458b437aae26f4da293f87; 8832cf922151e9dfa2821736beb0ae2dd3968b6e преди 2922e3507f6d5caa7f1d07f145e186fc6f317a4e; d44ff3b100b94e9f23b1e8dbe688eee9bb867ac9; 84026f8c9357c62a9d3e4c554ffd10ccab813654; 5.15.42 преди 5.16; 5.17.10 преди 5.18
  • Linux Linux: 5.18; преди 5.18; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.80 до 6.12.*; 6.18.21 до 6.18.*; 6.19.11 до 6.19.*; 7.0 до *

Вид слабост

История

  • 24 април 2026 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2026-31557: Linux, състезание за ресурс | freedomonline.bg