CVE-2026-74415: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: spi: atcspi200: fix use-after-free when driver unbind DMA resource is initialized after SPI controller registration. So when driver unbind, this can trigger a use-after-free when DMA is torn down while the controller is still alive and triggers DMA transfers.

Засегнати продукти

• Linux Linux: 34e3815ea4597131d4324a4aa243d2201e672005 преди af6a34c41683067a314d2b58b39edecb2e5e4ac6; 34e3815ea4597131d4324a4aa243d2201e672005 преди 565bdf45125a05aa8f622f58f598283f46ba43f4
• Linux Linux: 7.0; преди 7.0; 7.1.5 до 7.1.*; от 7.2 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-74415
• https://nvd.nist.gov/vuln/detail/CVE-2026-74415
• https://git.kernel.org/stable/c/af6a34c41683067a314d2b58b39edecb2e5e4ac6
• https://git.kernel.org/stable/c/565bdf45125a05aa8f622f58f598283f46ba43f4