Към съдържанието
Търсене

CVE-2026-98662: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap020a00f: drain irq_work after free_irq The threaded IRQ handler queues data->work through irq_work_queue() so the trigger is polled from a per-CPU context. free_irq() does not flush an irq_work the handler already queued, so after gp2ap020a00f_remove() returns that work may still run and call iio_trigger_poll() on data->trig, which the devm cleanup has already freed, causing a use-after-free. Add irq_work_sync(&data->work) after free_irq() in remove() and in the probe error path, mirroring commit 78601726d4a5 ("iio: trigger: sysfs: fix use-after-free on remove"). Found by an in-house static analysis tool, confirmed by manual review.

    Засегнати продукти

    • Linux Linux: bf29fbeaa13d3350ca71df70c705d8b883c45692 преди 6f2bb000493c3b4f5715b3103657393672aea05b; bf29fbeaa13d3350ca71df70c705d8b883c45692 преди 43fbbb9eaae5d6f45668e3c4d45508c498d6ba9c; bf29fbeaa13d3350ca71df70c705d8b883c45692 преди d029639b079b28a5334f934c848d895bef0653d1; bf29fbeaa13d3350ca71df70c705d8b883c45692 преди 85c20d1cf3f01a506605a16c2f9ce23b9c8b114f; bf29fbeaa13d3350ca71df70c705d8b883c45692 преди a36814b9fe00970116d30c3143d81e7425c4d334; bf29fbeaa13d3350ca71df70c705d8b883c45692 преди cc71400bc965c0d3894a38ead3d71243400c2d5e; bf29fbeaa13d3350ca71df70c705d8b883c45692 преди a1769877ff52a4f1bfb9ca535d1b5113808bd602; bf29fbeaa13d3350ca71df70c705d8b883c45692 преди 63213927b141085b6c8719b8037dab3074b7e0fe
    • Linux Linux: 3.13; преди 3.13; 5.10.273 до 5.10.*; 5.15.224 до 5.15.*; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.113 до 6.12.*; 6.18.56 до 6.18.*; 7.2.10 до 7.2.*; от 7.3 нататък

    История

    • 18 октомври 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-98662: Linux | freedomonline.bg