CVE-2026-64305: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - protect service table iterations with service_lock The service_table list is protected by service_lock when entries are added or removed (in adf_service_add() and adf_service_remove()), but several functions iterate over the list without holding this lock. A concurrent adf_service_register() or adf_service_unregister() call could modify the list during traversal, leading to list corruption or a use-after-free. Fix this by holding service_lock across all list_for_each_entry() iterations of service_table in adf_dev_init(), adf_dev_start(), adf_dev_stop(), adf_dev_shutdown(), adf_dev_restarting_notify(), adf_dev_restarted_notify(), and adf_error_notifier(). The lock ordering is safe: callers of the static helpers (adf_dev_up() and adf_dev_down()) acquire state_lock before service_lock, and no event_hld callback or service_lock holder ever acquires state_lock in the reverse order.

Засегнати продукти

• Linux Linux: d8cba25d2c68992a6e7c1d329b690a9ebe01167d преди d36bff434e01d06d1e1fa98aa2b34ec32185c1ab; d8cba25d2c68992a6e7c1d329b690a9ebe01167d преди 11d48f777cf8fad00db044f4c15cdf821427746b; d8cba25d2c68992a6e7c1d329b690a9ebe01167d преди 222fa7b453b612f4407f260146d89a2ce2bc831d; d8cba25d2c68992a6e7c1d329b690a9ebe01167d преди c3c5925791cff3b84d313293fd60f384d877d793; d8cba25d2c68992a6e7c1d329b690a9ebe01167d преди 0dbcecea740d943002c1cbdafa39bdfc108e32a5; d8cba25d2c68992a6e7c1d329b690a9ebe01167d преди 5c6f845e77ec35f9b7b047cc8f9789bf397cdd3e
• Linux Linux: 3.17; преди 3.17; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.96 до 6.12.*; 6.18.39 до 6.18.*; 7.1.4 до 7.1.*; 7.2 до *

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-64305
• https://nvd.nist.gov/vuln/detail/CVE-2026-64305
• https://git.kernel.org/stable/c/d36bff434e01d06d1e1fa98aa2b34ec32185c1ab
• https://git.kernel.org/stable/c/11d48f777cf8fad00db044f4c15cdf821427746b
• https://git.kernel.org/stable/c/222fa7b453b612f4407f260146d89a2ce2bc831d
• https://git.kernel.org/stable/c/c3c5925791cff3b84d313293fd60f384d877d793
• https://git.kernel.org/stable/c/0dbcecea740d943002c1cbdafa39bdfc108e32a5
• https://git.kernel.org/stable/c/5c6f845e77ec35f9b7b047cc8f9789bf397cdd3e