-

CVE-2026-68317

pds_core: fix auxiliary device add/del races

In the Linux kernel, the following vulnerability has been resolved:

pds_core: fix auxiliary device add/del races

Two paths add or delete the same slot (pf->vfs[vf_id].padev): a VF's
pdsc_reset_done() and the PF's devlink enable_vnet/disable_vnet handler.
They serialize on config_lock, but neither guards the slot under it
correctly.

add() registers and stores a new auxiliary device without first checking
the slot, so a second add of an already-populated slot leaks the first
device. del() makes that check outside config_lock, so two concurrent
dels can both pass it; the first clears the slot, and the second
dereferences a NULL pointer.

Check and update the slot under config_lock in both paths.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 0861fccd43b8bafb533d97308862d20b7db3a2ad
Version < 646b58b543f3bb1641e9123b75ff7799fe7b42f1
Status affected
Version f41e27b746241e57d968d1d61c008322338ca258
Version < ef194751fed50cf3452017b63f00142a0ab40c70
Status affected
Version b699bdc720c0255d1bb76cecba7382c1f2107af5
Version < cf0ed2ba202f5c3b300ec1bf7ff0b5d555f7d518
Status affected
Version b699bdc720c0255d1bb76cecba7382c1f2107af5
Version < bdeab32a7a91acd295d52a2d4ab1cc3f2da5e454
Status affected
Version b699bdc720c0255d1bb76cecba7382c1f2107af5
Version < bfa33cd513c7ceb93c5a4c30e5662acd73c0a916
Status affected
Version fec5f7af1d5f64a38f9224cd27b274d1af55a7ed
Status affected
Version 6.6.90
Version < 6.6.148
Status affected
Version 6.12.28
Version < 6.12.101
Status affected
Version 6.14.6
Version < 6.15
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.15
Status affected
Version 0
Version < 6.15
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.064
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/646b58b543f3bb1641e9123b75ff7799fe7b42f1
https://git.kernel.org/stable/c/ef194751fed50cf3452017b63f00142a0ab40c70
https://git.kernel.org/stable/c/cf0ed2ba202f5c3b300ec1bf7ff0b5d555f7d518
https://git.kernel.org/stable/c/bdeab32a7a91acd295d52a2d4ab1cc3f2da5e454
https://git.kernel.org/stable/c/bfa33cd513c7ceb93c5a4c30e5662acd73c0a916