Към съдържанието
Търсене

CVE-2026-97479: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: driver core: Avoid warning when removing a device while its supplier is unbinding During driver removal, the following warning can appear: WARNING: CPU: 1 PID: 139 at drivers/base/core.c:1497 __device_links_no_driver+0xcc/0xfc ... Call trace: __device_links_no_driver+0xcc/0xfc (P) device_links_driver_cleanup+0xa8/0xf0 device_release_driver_internal+0x208/0x23c device_links_unbind_consumers+0xe0/0x108 device_release_driver_internal+0xec/0x23c device_links_unbind_consumers+0xe0/0x108 device_release_driver_internal+0xec/0x23c device_links_unbind_consumers+0xe0/0x108 device_release_driver_internal+0xec/0x23c driver_detach+0xa0/0x12c bus_remove_driver+0x6c/0xbc driver_unregister+0x30/0x60 pci_unregister_driver+0x20/0x9c lan966x_pci_driver_exit+0x18/0xa90 [lan966x_pci] This warning is triggered when a consumer is removed because the links status of its supplier is not DL_DEV_DRIVER_BOUND and the link flag DL_FLAG_SYNC_STATE_ONLY is not set. The topology in terms of consumers/suppliers used was the following (consumer ---> supplier): i2c -----------> OIC ----> PCI device | ^ | | +---> pinctrl ---+ When the PCI device is removed, the OIC (interrupt controller) has to be removed. In order to remove the OIC, pinctrl and i2c need to be removed and to remove pinctrl, i2c need to be removed. The removal order is: 1) i2c 2) pinctrl 3) OIC 4) PCI device In details, the removal sequence is the following (with 0000:01:00.0 the PCI device): driver_detach: call device_release_driver_internal(0000:01:00.0)... device_links_busy(0000:01:00.0): links->status = DL_DEV_UNBINDING device_links_unbind_consumers(0000:01:00.0): 0000:01:00.0--oic link->status = DL_STATE_SUPPLIER_UNBIND call device_release_driver_internal(oic)... device_links_busy

    Засегнати продукти

    • Linux Linux: 8c3e315d4296421cd26b3300ee0ac117f0877f20 преди 3d13785eabc3871bde179f3f17a2b2bef064864a; 8c3e315d4296421cd26b3300ee0ac117f0877f20 преди d5eb39d6178ca88db706c7b82dcd19a77f30aa9e; 8c3e315d4296421cd26b3300ee0ac117f0877f20 преди da22e4bce2a8cbed32dcda407b7d06cb5feec8e3; 8c3e315d4296421cd26b3300ee0ac117f0877f20 преди 73ea4ec0ec46d12558a61842b474e7dd63538edc; 8c3e315d4296421cd26b3300ee0ac117f0877f20 преди 36d74f17e03f7e60e1b08fbe16cfad6e69cc3aa9; 2e5c082d3727522a3f30a50582784d24754d14a8; 70154bb515a325c007bcf64971099e1e17f16f28; 5.6.19 преди 5.7; 5.7.3 преди 5.8
    • Linux Linux: 5.8; преди 5.8; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.114 до 6.12.*; 6.18.53 до 6.18.*; от 7.2 нататък

    История

    • 24 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-97479: Linux | freedomonline.bg