Към съдържанието
Търсене

CVE-2026-99150: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr amdgpu_debugfs_gpr_read() drops its runtime PM reference right after reading the wave registers. When copying them to userspace fails, it jumps to the err label, which drops the reference a second time. A read into a bad buffer on Navi31 either steals a reference somebody else holds (power/runtime_usage goes from 1 to 0) or underflows the count: amdgpu 0000:03:00.0: Runtime PM usage count underflow! The registers are already in the kernel buffer at that point, so finish the hardware access first and copy the buffer with a single copy_to_user() instead of the put_user() loop with its own error path. (cherry picked from commit 31035bbd74f7c3e10c163db875b8e67f8b50ee6a)

    Засегнати продукти

    • Linux Linux: 9eee152aab56d374edb9ad21b3db05f5cdda2fe6 преди 24c1f6e381d564e5f6893323cfe0264950358451; 9eee152aab56d374edb9ad21b3db05f5cdda2fe6 преди c333834b1b9cbb1021c954d29fa2373ac9e73499; 9eee152aab56d374edb9ad21b3db05f5cdda2fe6 преди eda6b57a83d942199a5947e73556fe918affad86; 9eee152aab56d374edb9ad21b3db05f5cdda2fe6 преди f9c0b333a5e44f734478ca8a7345f8b87d65ba7c; 9eee152aab56d374edb9ad21b3db05f5cdda2fe6 преди 35aa048f242cade635f17924183c1df0ffe7a486; 9eee152aab56d374edb9ad21b3db05f5cdda2fe6 преди 652b1f26125fe48aed5f4944698a85b457eef491; 9eee152aab56d374edb9ad21b3db05f5cdda2fe6 преди 253555a9baccefffe1f6e5f2fe54363c7c01ebb9; 9eee152aab56d374edb9ad21b3db05f5cdda2fe6 преди de9f6bcdb44f0e410031002e2f103826ea6b6259; 865e2dbadf6856c9219626fbd6154cac44e5fbca; 5.8.2 преди 5.9
    • Linux Linux: 5.9; преди 5.9; 5.10.273 до 5.10.*; 5.15.224 до 5.15.*; 6.1.191 до 6.1.*; 6.6.161 до 6.6.*; 6.12.115 до 6.12.*; 6.18.59 до 6.18.*; 7.2.13 до 7.2.*; от 7.3 нататък

    История

    • 28 октомври 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-99150: Linux | freedomonline.bg