Към съдържанието
Търсене

CVE-2026-80678: Linux

8.4

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се локално, без особени условия, без вход и без действие от потребителя.

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Fix slave registration race and error handling In i2c_imx_reg_slave(), the slave pointer was assigned before pm_runtime_resume_and_get(). If pm_runtime_resume_and_get() failed, the error path returned without clearing i2c_imx->slave, leaving it non-NULL and causing all subsequent registration attempts to fail with -EBUSY. Additionally, because this driver uses a shared IRQ, the interrupt handler i2c_imx_isr() can execute concurrently and, after acquiring slave_lock, dereference i2c_imx->slave. The previous fix attempt added a lockless i2c_imx->slave = NULL on the error path, but that could race with the ISR under the lock and still cause a NULL pointer dereference. Fix both issues by deferring the assignment of i2c_imx->slave and i2c_imx->last_slave_event to after a successful resume, and by performing the assignment inside the slave_lock critical section. This guarantees that the slave pointer is never left stale on the error path and is always valid when observed by the interrupt handler.

Засегнати продукти

  • Linux Linux: f7414cd6923fd7f78e57086fc964ba2dc25db5c1 преди 754bc62f72fd64b202462367134ac8ce95b005de; f7414cd6923fd7f78e57086fc964ba2dc25db5c1 преди cfdf6e13518589f911b7eace6ccb788e4ed87397; f7414cd6923fd7f78e57086fc964ba2dc25db5c1 преди b9f6f4883b9ac86654e75899d0dbf8a7a96ad5d8; f7414cd6923fd7f78e57086fc964ba2dc25db5c1 преди d6748f6802f3eebafaa16a5e5dcfbfb9b3bc173f; f7414cd6923fd7f78e57086fc964ba2dc25db5c1 преди 12a4f0950a158d98552cbaeacc35edccd8d975fa; f7414cd6923fd7f78e57086fc964ba2dc25db5c1 преди 614ca6594e301ff682999797c2216e9685558a2b; f7414cd6923fd7f78e57086fc964ba2dc25db5c1 преди d64ec362c369bbc33833f7936d5f3a706b0d5c45
  • Linux Linux: 5.11; преди 5.11; 5.15.217 до 5.15.*; 6.1.183 до 6.1.*; 6.6.151 до 6.6.*; 6.12.103 до 6.12.*; 6.18.44 до 6.18.*; 7.1.8 до 7.1.*; от 7.2 нататък

История

  • 28 август 2026 Публикувано

Други уязвимости в Linux Linux

Първоизточници

CVE-2026-80678: Linux | freedomonline.bg