7.8

CVE-2026-74330

configfs: fix lockless traversals of ->s_children

In the Linux kernel, the following vulnerability has been resolved:

configfs: fix lockless traversals of ->s_children

Having the parent directory locked protects entries from removal
by another thread, but it does *not* protect cursors from being
moved around by lseek() - or freed, for that matter.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 6f61076406251626be39651d114fac412b1e0c39
Version < 77fd6f50f633a52c2db061e7d71d8cb486b0265e
Status affected
Version 6f61076406251626be39651d114fac412b1e0c39
Version < 91f289728ec706b7ff1ca0ee845dd73ff2253488
Status affected
Version 6f61076406251626be39651d114fac412b1e0c39
Version < b166ab78dc3f48e83d2c80bdfde4159b31fdc5fb
Status affected
Version 6f61076406251626be39651d114fac412b1e0c39
Version < 9e57e2863872e82e7c7237bc32299f67ebebc543
Status affected
Version 6f61076406251626be39651d114fac412b1e0c39
Version < 459860529c109c5ce08b81c0776ca1200eaaeb4a
Status affected
Version 6f61076406251626be39651d114fac412b1e0c39
Version < 637ef4961470e04455102b34ac484a34d8eca0a4
Status affected
Version 6f61076406251626be39651d114fac412b1e0c39
Version < e6d93108e0a27d7e6f95c7e45017d14ba2900d32
Status affected
Version 6f61076406251626be39651d114fac412b1e0c39
Version < 9b9e8bb81c41fd27e7b57a1c936fde140548535f
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 2.6.27
Status affected
Version 0
Version < 2.6.27
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.03
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/77fd6f50f633a52c2db061e7d71d8cb486b0265e
https://git.kernel.org/stable/c/91f289728ec706b7ff1ca0ee845dd73ff2253488
https://git.kernel.org/stable/c/b166ab78dc3f48e83d2c80bdfde4159b31fdc5fb
https://git.kernel.org/stable/c/9e57e2863872e82e7c7237bc32299f67ebebc543
https://git.kernel.org/stable/c/459860529c109c5ce08b81c0776ca1200eaaeb4a
https://git.kernel.org/stable/c/637ef4961470e04455102b34ac484a34d8eca0a4
https://git.kernel.org/stable/c/e6d93108e0a27d7e6f95c7e45017d14ba2900d32
https://git.kernel.org/stable/c/9b9e8bb81c41fd27e7b57a1c936fde140548535f