Към съдържанието
Търсене

CVE-2026-98128: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() mpi3mr_get_tgtdev_by_addr() increments the target device kref when it returns a device. If a subsequent error triggers a goto out_fail after the tgtdev reference is acquired, the reference is never released because the out_fail path does not call mpi3mr_tgtdev_put(). This prevents the target device structure from ever being freed. Add a tgtdev put in the out_fail path, guarded by a NULL check since tgtdev is only acquired for SAS_END_DEVICE types and the same cleanup path is shared by earlier error cases where tgtdev is still NULL.

    Засегнати продукти

    • Linux Linux: e22bae30667a7e74ed057e00fb6e8c79e0738de3 преди 60a9aaac07f6470b252c4de40e7d8a6e25004093; e22bae30667a7e74ed057e00fb6e8c79e0738de3 преди 58e3d2fbc8c914ed3dce2f7d915b3c4f4a3c76fb; e22bae30667a7e74ed057e00fb6e8c79e0738de3 преди 040146f81d099006a354b0caacc7f01ca00f257e; e22bae30667a7e74ed057e00fb6e8c79e0738de3 преди 06a7073b33b8f5cb0ee71e07dc669efffb1c7d58; e22bae30667a7e74ed057e00fb6e8c79e0738de3 преди 1ccbe8c42009706af79e6629c70d42fc929aef2b; e22bae30667a7e74ed057e00fb6e8c79e0738de3 преди 419d129f970aaa6567dbac366b0c93784bf9ec97
    • Linux Linux: 6.1; преди 6.1; 6.1.189 до 6.1.*; 6.6.158 до 6.6.*; 6.12.111 до 6.12.*; 6.18.53 до 6.18.*; 7.2.7 до 7.2.*; от 7.3 нататък

    История

    • 25 септември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-98128: Linux | freedomonline.bg