Към съдържанието
Търсене

CVE-2026-68096: Linux, отказ на услуга

7.5

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: audit: fix recursive locking deadlock in audit_dupe_exe() A deadlock occurs in the audit subsystem when duplicating executable-related rules. When a file is moved (e.g., via do_renameat2()), the VFS layer locks the parent directory (I_MUTEX_PARENT), which synchronously triggers an fsnotify_move event. If an existing executable audit rule matches the file being moved, the audit subsystem catches this event and calls audit_dupe_exe() to duplicate the watch and update the rule. Then, audit_alloc_mark() would call kern_path_parent() to resolve the path, leading to a blind attempt to acquire the exact same I_MUTEX_PARENT lock already held by the task, resulting in the following recursive locking deadlock: ============================================ WARNING: possible recursive locking detected 6.12.0-55.27.1.el10_0.x86_64+debug #1 Not tainted -------------------------------------------- mv/5099 is trying to acquire lock: ffff888132845358 (&inode->i_sb->s_type->i_mutex_dir_key/1){+.+.}-{3:3}, at: __kern_path_locked+0x10a/0x2f0 but task is already holding lock: ffff888132846b58 (&inode->i_sb->s_type->i_mutex_dir_key/1){+.+.}-{3:3}, at: lock_two_directories+0x13f/0x2b0 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&inode->i_sb->s_type->i_mutex_dir_key/1); lock(&inode->i_sb->s_type->i_mutex_dir_key/1); *** DEADLOCK *** May be due to missing lock nesting notation 6 locks held by mv/5099: #0: ffff888112a9c440 (sb_writers#13) at: do_renameat2+0x34c/0xbc0 #1: ffff888112a9c790 (&type->s_vfs_rename_key#3) at: do_renameat2+0x415/0xbc0 #2: ffff888132846b58 (&inode->i_sb->s_type->i_mutex_dir_key/1) at: lock_two_directories+0x13f/0x2b0 #3: ffff888132845358 (&inode->i_sb->s_type->i_mutex_dir_key/5) at: lock_two_directories+0x175/0x2b0 #4: ffffffffb3a1fb10 (&fsnotify_mark_srcu) at: fsnotify+0x454/0x28a0

Засегнати продукти

  • Linux Linux: 34d99af52ad40bd498ba66970579a5bc1fb1a3bc преди 6114c3f21eb2ae175401736da744b684705e7ed9; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc преди f6fda0ac6661c23b8356dfb1cc423960cc6f0593; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc преди 3bbb4931f7cd84cecf29ec222c0732bf9ad4da9f; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc преди 36eb77f14b4e6f2dc1008c1fabe31236397be27a; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc преди 7d1f66c69898ffb1a718926c32a777ecc471caca; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc преди 40879c39d6740f3dddfb52b5d6ba7fb8cceb84d8; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc преди 3b601938314c24fcd1afb6659cad92fe96c9c2f8; 34d99af52ad40bd498ba66970579a5bc1fb1a3bc преди 81905b5acbe77284734438df3fbec1158e6429a3
  • Linux Linux: 4.3; преди 4.3; 5.10.266 до 5.10.*; 5.15.217 до 5.15.*; 6.1.184 до 6.1.*; 6.6.148 до 6.6.*; 6.12.101 до 6.12.*; 6.18.42 до 6.18.*; 7.1.6 до 7.1.*; 7.2 до *

Вид слабост

История

  • 10 август 2026 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2026-68096: Linux, отказ на услуга | freedomonline.bg