Към съдържанието
Търсене

CVE-2026-89860: Linux

8.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се от съседна мрежа, без особени условия, без вход и без действие от потребителя.

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Initialize NVMe abort_work once at submission qla_nvme_fcp_abort() and qla_nvme_ls_abort() ran INIT_WORK() on priv->abort_work immediately before schedule_work(). INIT_WORK() reinitializes the work_struct, resetting its list head and clearing the pending bit. If an abort is issued more than once for the same command (for example, concurrent transport teardown and a timeout-driven abort), the second INIT_WORK() reinitializes a work item that is already queued, which can corrupt the workqueue list and lead to crashes or a looping worker. Initialize priv->abort_work once at command submission, next to the existing per-command spin_lock_init(&priv->cmd_lock), and leave only schedule_work() in the abort paths. schedule_work() already does nothing when the work item is still pending, so a repeated abort no longer disturbs an in-flight work item. The command is not returned to the transport until the final kref_put()/release callback runs after abort_work has completed, so the work item is idle before priv is reused and the single submission-time INIT_WORK() is safe.

    Засегнати продукти

    • Linux Linux: e473b3074104ee09227cfbba5f872e3ea15dd280 преди 6ee4e3774349fa04bba13e668f3322db47d89b08; e473b3074104ee09227cfbba5f872e3ea15dd280 преди 55259e225412721c3cc09e4d95a489542c0c05b0; e473b3074104ee09227cfbba5f872e3ea15dd280 преди 17d9011c96f819e69074f465c04ee79e693de6a1; e473b3074104ee09227cfbba5f872e3ea15dd280 преди b403700ac62fbf3c310196386e125879a182efcf; e473b3074104ee09227cfbba5f872e3ea15dd280 преди 6a1b50c4879c2e6a034e8e85f9c055f0eea157c7; e473b3074104ee09227cfbba5f872e3ea15dd280 преди 67f0d5187c29360388f7e1e503c627ec45d01089; e473b3074104ee09227cfbba5f872e3ea15dd280 преди f4aaa4a4e6f1da6f3abfd80e1917bef922287177; e473b3074104ee09227cfbba5f872e3ea15dd280 преди 7e85f6dbc85616de2172bce8eaf84b387a723cd1
    • Linux Linux: 4.17; преди 4.17; 5.10.273 до 5.10.*; 5.15.224 до 5.15.*; 6.1.191 до 6.1.*; 6.6.157 до 6.6.*; 6.12.110 до 6.12.*; 6.18.51 до 6.18.*; 7.2.5 до 7.2.*; от 7.3 нататък

    История

    • 16 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-89860: Linux | freedomonline.bg