Към съдържанието
Търсене

CVE-2026-90151: Linux

9.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client allocation failure nfs4_alloc_client() allocates an NFSv4.0 callback identifier before it finishes setting up the client. If any later initialization step fails, the error path frees the nfs_client directly with nfs_free_client(). That bypasses nfs_put_client(), which is where the callback IDR entry is removed during normal teardown. A failed allocation can therefore leave cb_ident_idr pointing at a freed nfs_client. A later NFSv4.0 callback lookup by cb_ident would find the stale pointer and take a reference to it. Make the callback IDR removal helper callable by the allocation failure path, and remove the callback identifier before freeing the client. This was found by a local static-analysis checker for publish-before-free lifetime bugs and confirmed by manual inspection.

    Засегнати продукти

    • Linux Linux: f4eecd5da3422e82e88e36c33cbd2595eebcacb1 преди 68c721391b761dbe38d5b0094d2bb6e8489ad92b; f4eecd5da3422e82e88e36c33cbd2595eebcacb1 преди 9bfdd0f591307b5198826a0e7a5b2f35f87acd2d; f4eecd5da3422e82e88e36c33cbd2595eebcacb1 преди 7c4812eb96bdcafb31a65b12f2aa96659429d1d4; f4eecd5da3422e82e88e36c33cbd2595eebcacb1 преди fc95ca82d5ae598c428ab5a00ae69f8526d59371; f4eecd5da3422e82e88e36c33cbd2595eebcacb1 преди 80b1c3d5a881f7d9081aa9f46da9742878a0f893; f4eecd5da3422e82e88e36c33cbd2595eebcacb1 преди 3f2387e8bfbc4efda5d77c3a11a028d0a119c48f; f4eecd5da3422e82e88e36c33cbd2595eebcacb1 преди 5891c03e150920618db0e9c4ea2d772abacdcfd1; f4eecd5da3422e82e88e36c33cbd2595eebcacb1 преди d05c2007b3d84ccba11dc6e9cb3202768cc72f14
    • Linux Linux: 2.6.38; преди 2.6.38; 5.10.270 до 5.10.*; 5.15.221 до 5.15.*; 6.1.188 до 6.1.*; 6.6.157 до 6.6.*; 6.12.110 до 6.12.*; 6.18.52 до 6.18.*; 7.2.6 до 7.2.*; от 7.3 нататък

    История

    • 17 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-90151: Linux | freedomonline.bg