Към съдържанието
Търсене

CVE-2026-31722: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_rndis: Fix net_device lifecycle with device_move The net_device is allocated during function instance creation and registered during the bind phase with the gadget device as its sysfs parent. When the function unbinds, the parent device is destroyed, but the net_device survives, resulting in dangling sysfs symlinks: console:/ # ls -l /sys/class/net/usb0 lrwxrwxrwx ... /sys/class/net/usb0 -> /sys/devices/platform/.../gadget.0/net/usb0 console:/ # ls -l /sys/devices/platform/.../gadget.0/net/usb0 ls: .../gadget.0/net/usb0: No such file or directory Use device_move() to reparent the net_device between the gadget device tree and /sys/devices/virtual across bind and unbind cycles. During the final unbind, calling device_move(NULL) moves the net_device to the virtual device tree before the gadget device is destroyed. On rebinding, device_move() reparents the device back under the new gadget, ensuring proper sysfs topology and power management ordering. To maintain compatibility with legacy composite drivers (e.g., multi.c), the borrowed_net flag is used to indicate whether the network device is shared and pre-registered during the legacy driver's bind phase.

    Засегнати продукти

    • Linux Linux: f466c6353819326873fa48a02c6f2d7c903240d6 преди f374388891778c2f58facc0f61f2610a206a1876; f466c6353819326873fa48a02c6f2d7c903240d6 преди 9701a98f4459b52558f683b6b12a6feb6f17b255; f466c6353819326873fa48a02c6f2d7c903240d6 преди 1ef251aa63972fe6c0f107f5abd139b7d0f7987a; f466c6353819326873fa48a02c6f2d7c903240d6 преди 18ada801899f2b13ef0ceff42427ad980a41e619; f466c6353819326873fa48a02c6f2d7c903240d6 преди 6045ea5ca6e3fa13f8a9fafb1c535c86e124c14d; f466c6353819326873fa48a02c6f2d7c903240d6 преди e367599529dc42578545a7f85fde517b35b3cda7
    • Linux Linux: 3.11; преди 3.11; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.81 до 6.12.*; 6.18.22 до 6.18.*; 6.19.12 до 6.19.*; от 7.0 нататък

    История

    • 1 май 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-31722: Linux | freedomonline.bg