CVE-2026-98967: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: cxgb4/ch_ktls: disable softirqs around tid_list erases chcr_ktls_cpl_act_open_rpl() inserts into tid_list from the receive path using xa_insert_bh(). The array is shared by the adapter's connections and initialized with XA_FLAGS_LOCK_BH. However, chcr_ktls_dev_del() and the chcr_ktls_dev_add() error path use xa_erase(), which takes the XArray lock without disabling softirqs. When cleanup runs with softirqs enabled, a receive softirq for another connection on the same CPU can interrupt the erase and spin on the lock held by the interrupted task. Use xa_erase_bh() at both sites to match the insertion path.

Засегнати продукти

• Linux Linux: b96adbf6601d76ee0bdd9bfa5bcdd0cdd5333d78 преди 2c49ea1dd16d6dc0dd895e6aec57c9a448191cfe; 65e302a9bd57b62872040d57eea1201562a7cbb2 преди bafe51bb145e6ae549ae79dcbc35648292625934; 65e302a9bd57b62872040d57eea1201562a7cbb2 преди 0c5063a898813a420e6bad93debd134ef8b3bfd1; 65e302a9bd57b62872040d57eea1201562a7cbb2 преди 8739f06e3f82cd715f7dd10ab24029ed881efc90; 65e302a9bd57b62872040d57eea1201562a7cbb2 преди bcf97573d44e277b1744d7f1226f665aa0ccc599; 65e302a9bd57b62872040d57eea1201562a7cbb2 преди 7110c7f70c59eb7924e79853bcc00e2a026662e6; 65e302a9bd57b62872040d57eea1201562a7cbb2 преди bea736a2b8c6da5b1078badf1206541b5404250f; 65e302a9bd57b62872040d57eea1201562a7cbb2 преди 4c9dc0faca98084922caeb689579d338cf3e1c29; 70c4ead897211b184f36cbeda213f2a3e8153218; 5.10.42 преди 5.10.273; 5.12.9 преди 5.13
• Linux Linux: 5.13; преди 5.13; 5.10.273 до 5.10.*; 5.15.224 до 5.15.*; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.113 до 6.12.*; 6.18.57 до 6.18.*; 7.2.11 до 7.2.*; 7.3 до *

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-98967
• https://nvd.nist.gov/vuln/detail/CVE-2026-98967
• https://git.kernel.org/stable/c/2c49ea1dd16d6dc0dd895e6aec57c9a448191cfe
• https://git.kernel.org/stable/c/bafe51bb145e6ae549ae79dcbc35648292625934
• https://git.kernel.org/stable/c/0c5063a898813a420e6bad93debd134ef8b3bfd1
• https://git.kernel.org/stable/c/8739f06e3f82cd715f7dd10ab24029ed881efc90
• https://git.kernel.org/stable/c/bcf97573d44e277b1744d7f1226f665aa0ccc599
• https://git.kernel.org/stable/c/7110c7f70c59eb7924e79853bcc00e2a026662e6
• https://git.kernel.org/stable/c/bea736a2b8c6da5b1078badf1206541b5404250f
• https://git.kernel.org/stable/c/4c9dc0faca98084922caeb689579d338cf3e1c29