Към съдържанието
Търсене

CVE-2026-98290: Linux

7.5

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се от съседна мрежа, при специфични условия, без вход и без действие от потребителя.

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup rfcomm_sock_cleanup_listen() closes unaccepted child sockets through rfcomm_sock_close(), which takes the child socket lock before rfcomm_dlc_close() acquires rfcomm_mutex. The RFCOMM worker takes these locks in reverse order while handling connections and DLC state changes, so lockdep reports a possible deadlock. Close dequeued children without taking their socket lock. The accept queue owns a reference to each child, and bt_accept_dequeue() locks the child while unlinking it and clearing its parent pointer. Dropping the child lock makes it important to prevent a concurrent rfcomm_connect_ind() from enqueueing a new child after cleanup observes an empty queue. Set a listening socket to BT_CLOSED while its lock is still held, before dropping the lock and draining the queue. The state check in rfcomm_connect_ind() then rejects new children once cleanup starts.

    Засегнати продукти

    • Linux Linux: b7ce436a5d798bc59e71797952566608a4b4626b преди eb4adaa46e4c9e6efa7be3ce06398f4d7c39b57c; b7ce436a5d798bc59e71797952566608a4b4626b преди 4aafb47301a799d3e01230d6568c4e93524e1523; b7ce436a5d798bc59e71797952566608a4b4626b преди c741977e413f5b49d306700820fb55ccb8269f5a; b7ce436a5d798bc59e71797952566608a4b4626b преди c6792c441767256030606eb82dca5d5fc360dd9a; b7ce436a5d798bc59e71797952566608a4b4626b преди bfce253f039eb5f58b810af267942a9f59207254; b7ce436a5d798bc59e71797952566608a4b4626b преди 18174b166547ef41973cc19feb5ef9cab39a8def; b7ce436a5d798bc59e71797952566608a4b4626b преди 801fb950cae7048eb7d83b18857d1ca37b8cd5a4
    • Linux Linux: 5.15; преди 5.15; 5.15.222 до 5.15.*; 6.1.189 до 6.1.*; 6.6.158 до 6.6.*; 6.12.112 до 6.12.*; 6.18.54 до 6.18.*; 7.2.8 до 7.2.*; от 7.3 нататък

    История

    • 6 октомври 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-98290: Linux | freedomonline.bg