CVE-2026-98295: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: coredump: Quiesce dump work on unregister hci_devcd_handle_pkt_init() arms dump_timeout and coredump producers queue dump_rx without holding an hdev reference. Unregister leaves both works live, so disconnecting during an active dump lets them access hdev after hci_release_dev() frees it. Shut down coredump processing during unregister. Close the producer gate under dump_q.lock before disabling both works, then free the active buffer and queued packets under hci_dev_lock. Serializing the gate with enqueue prevents controller-specific workers from adding packets after the final purge.

Засегнати продукти

• Linux Linux: 9695ef876fd122cb7bbc04a4a93b8727d2e36bda преди 24af375d7d8aa5f698e4dc41317102f44114351a; 9695ef876fd122cb7bbc04a4a93b8727d2e36bda преди dcaf10ef27f928568c25de3e9fc242e538de5c67; 9695ef876fd122cb7bbc04a4a93b8727d2e36bda преди 82699d1b727ba5980b94f1eb8dc3d346f41b7c67; 9695ef876fd122cb7bbc04a4a93b8727d2e36bda преди d236517c264e41dc09833c708ef23bccb7a91219; deb8156ebe5cb63a5988e7f86cc46aa062527c2b; 6.1.188 преди 6.2
• Linux Linux: 6.4; преди 6.4; 6.12.112 до 6.12.*; 6.18.54 до 6.18.*; 7.2.8 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-98295
• https://nvd.nist.gov/vuln/detail/CVE-2026-98295
• https://git.kernel.org/stable/c/24af375d7d8aa5f698e4dc41317102f44114351a
• https://git.kernel.org/stable/c/dcaf10ef27f928568c25de3e9fc242e538de5c67
• https://git.kernel.org/stable/c/82699d1b727ba5980b94f1eb8dc3d346f41b7c67
• https://git.kernel.org/stable/c/d236517c264e41dc09833c708ef23bccb7a91219