Към съдържанието
Търсене

CVE-2026-99035: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: mmc: mtk-sd: Cancel request timeout work on remove The driver queues req_timeout while a request is active. msdc_request_done() uses cancel_delayed_work(), which does not wait for a timeout callback that has already started. The timeout callback calls mmc_request_done(), which wakes the request waiter, and then continues to use host->dev_comp and check the SDIO IRQ. During unbind, msdc_drv_remove() can return and the managed mmc_host can be freed before the callback finishes. KASAN reported use-after-free accesses in msdc_request_done() and msdc_recheck_sdio_irq() in each of three unbind tests. The same tests completed without a kernel diagnostic after this change. Call cancel_delayed_work_sync() after mmc_remove_host() has stopped new requests and before the driver releases the host resources.

    Засегнати продукти

    • Linux Linux: 208489032bdd8d4a7de50f3057c175058f271956 преди d8ce81006ee4e42ce2d0bd3a2ab87adc1e24ef11; 208489032bdd8d4a7de50f3057c175058f271956 преди 2cff6a2a912a3464ae1fefb7e0a82393682ccea6; 208489032bdd8d4a7de50f3057c175058f271956 преди e5d82695f2cabca3222b8f6a89ea0e18bafc4c0a; 208489032bdd8d4a7de50f3057c175058f271956 преди 9e799f25c420e759641eb25102967ea091fc758f; 208489032bdd8d4a7de50f3057c175058f271956 преди f37e0367ad6f2147a0b37564b442b7a25bec0d23; 208489032bdd8d4a7de50f3057c175058f271956 преди 46e75703ca3f00fb8c935b3ce35b90836e34e8af; 208489032bdd8d4a7de50f3057c175058f271956 преди edef1355224c0799a502a46b71d3649fa0dd218e; 208489032bdd8d4a7de50f3057c175058f271956 преди b38af5386a74416e898955443f2e26547b358cb2
    • Linux Linux: 4.2; преди 4.2; 5.10.273 до 5.10.*; 5.15.224 до 5.15.*; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.113 до 6.12.*; 6.18.57 до 6.18.*; 7.2.11 до 7.2.*; от 7.3 нататък

    История

    • 23 октомври 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-99035: Linux | freedomonline.bg