CVE-2026-68317: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: pds_core: fix auxiliary device add/del races Two paths add or delete the same slot (pf->vfs[vf_id].padev): a VF's pdsc_reset_done() and the PF's devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly. add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer. Check and update the slot under config_lock in both paths.

Засегнати продукти

• Linux Linux: 0861fccd43b8bafb533d97308862d20b7db3a2ad преди 646b58b543f3bb1641e9123b75ff7799fe7b42f1; f41e27b746241e57d968d1d61c008322338ca258 преди ef194751fed50cf3452017b63f00142a0ab40c70; b699bdc720c0255d1bb76cecba7382c1f2107af5 преди cf0ed2ba202f5c3b300ec1bf7ff0b5d555f7d518; b699bdc720c0255d1bb76cecba7382c1f2107af5 преди bdeab32a7a91acd295d52a2d4ab1cc3f2da5e454; b699bdc720c0255d1bb76cecba7382c1f2107af5 преди bfa33cd513c7ceb93c5a4c30e5662acd73c0a916; fec5f7af1d5f64a38f9224cd27b274d1af55a7ed; 6.6.90 преди 6.6.148; 6.12.28 преди 6.12.101; 6.14.6 преди 6.15
• Linux Linux: 6.15; преди 6.15; 6.6.148 до 6.6.*; 6.12.101 до 6.12.*; 6.18.42 до 6.18.*; 7.1.6 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-68317
• https://nvd.nist.gov/vuln/detail/CVE-2026-68317
• https://git.kernel.org/stable/c/646b58b543f3bb1641e9123b75ff7799fe7b42f1
• https://git.kernel.org/stable/c/ef194751fed50cf3452017b63f00142a0ab40c70
• https://git.kernel.org/stable/c/cf0ed2ba202f5c3b300ec1bf7ff0b5d555f7d518
• https://git.kernel.org/stable/c/bdeab32a7a91acd295d52a2d4ab1cc3f2da5e454
• https://git.kernel.org/stable/c/bfa33cd513c7ceb93c5a4c30e5662acd73c0a916