Към съдържанието
Търсене

CVE-2026-99005: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Unmask interrupts only when ACTIVE is true There is a small race window between intel_rps_boost() reading a stale ACTIVE state and queuing rps->work, where ACTIVE may be changed via asynchronous calls triggered by wakeref drop. This means that rps_work() could be triggered after the GT has been parked, so unmasking RPS PM interrupts would happen without holding PM wakelock. This sequence of events may be observed during live_rc6_ctx_wa() selftest: 1) live_rc6_ctx_wa() -> intel_engine_pm_put() -> wakeref_put() ASYNC1) wakeref_put() callback -> __engine_park() -> intel_gt_pm_put_async() -> intel_gt_pm_put_async_untracked() -> intel_wakeref_put_async() ASYNC2) wakeref_put_async() callback -> __gt_park() -> intel_rps_park() -> intel_rps_clear_active() [clear ACTIVE] WITH INTERRUPTS: -> rps_disable_interrupts() -> cancel_work_sync(rps->work) -> rps_reset_interrupts() [rps->pm_iir = 0] WITHOUT INTERRUPTS (TIMER mode): -> rps_stop_timer() -> cancel_work_sync(rps->work) 2) live_rc6_ctx_wa() -> intel_gt_wait_for_idle() -> intel_gt_retire_requests_timeout() -> dma_fence_wait_timeout() -> ops->wait() [i915_fence_wait()] -> i915_request_wait_timeout() -> intel_rps_boost() -> intel_rps_is_active() [check ACTIVE] [OPEN RACE WINDOW] -> queue_work(rps->work) -> retire_requests() -> i915_request_retire() -> intel_rps_dec_waiters() [from 1 to 0] If ASYNC1 and ASYNC2 would execute during [OPEN RACE WINDOW], then: 3) rps_work() executes from the workqueue and may satisfy "(!pm_iir && !client_boost)" test (in TI

    Засегнати продукти

    • Linux Linux: 3e7abf8141935ded77abeb622480bf4a14241ece преди c2c2bab5eeb227c0c45d971c58a5f66661e7bb8a; 3e7abf8141935ded77abeb622480bf4a14241ece преди 0eb18add8cd84b4d7a6caa71e78cbe5faa912498; 3e7abf8141935ded77abeb622480bf4a14241ece преди 8833daaa6f2102b4d527711d09cd72741601242a; 3e7abf8141935ded77abeb622480bf4a14241ece преди 77abc1837c9651c8f43f7f7f336d10093eeb7745; 3e7abf8141935ded77abeb622480bf4a14241ece преди 60f58da15f8c8e39706c564f9251de3626636dce; 3e7abf8141935ded77abeb622480bf4a14241ece преди 0b4a0fb98b9ffeac36798bbd369c821605cae70f; 3e7abf8141935ded77abeb622480bf4a14241ece преди 49d349c42cf5ebaa878d02699c632c9d883d935f; 3e7abf8141935ded77abeb622480bf4a14241ece преди 5346b1cec6afa4f9b4b49a9f84e3cfef95a3f7bb
    • Linux Linux: 5.5; преди 5.5; 5.10.273 до 5.10.*; 5.15.224 до 5.15.*; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.113 до 6.12.*; 6.18.57 до 6.18.*; 7.2.11 до 7.2.*; от 7.3 нататък

    История

    • 23 октомври 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-99005: Linux | freedomonline.bg