7.8

CVE-2026-89510

RDMA/cxgb4: Cancel reg_work before freeing device on remove

In the Linux kernel, the following vulnerability has been resolved:

RDMA/cxgb4: Cancel reg_work before freeing device on remove

c4iw_uld_state_change() queues reg_work to register the RDMA device.
c4iw_remove() can free ctx->dev while this work is pending or running,
leaving c4iw_register_device() accessing the freed device.

Cancel reg_work before removing the device.  The registration work can
tear down ctx->dev when registration fails, so do not unregister or
deallocate it again in that case.

This issue was found by an in-house static analysis tool.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1c8f1da5d851b92aeb81dbbb9ebd516f6e2588f5
Version < e6e79e7be87c5ea92728060a3d7fb56890a91e45
Status affected
Version 1c8f1da5d851b92aeb81dbbb9ebd516f6e2588f5
Version < 672ee1981db10569ec96030bddb322f18382ec04
Status affected
Version 1c8f1da5d851b92aeb81dbbb9ebd516f6e2588f5
Version < 4681e731db07769846901cfabdd3e53f765eb9d3
Status affected
Version 1c8f1da5d851b92aeb81dbbb9ebd516f6e2588f5
Version < 3265d558dfafab8f12f5fba06ebbf15cae9f3225
Status affected
Version 1c8f1da5d851b92aeb81dbbb9ebd516f6e2588f5
Version < fe9c591026c576d8b1f72aab5e4cd67350530763
Status affected
Version 1c8f1da5d851b92aeb81dbbb9ebd516f6e2588f5
Version < 85f438382a865a4dc4c50e6b884310bb2b60fc4d
Status affected
Version 1c8f1da5d851b92aeb81dbbb9ebd516f6e2588f5
Version < 320e5258a53af0abc5abd9eb01519a48bab2dee8
Status affected
Version 1c8f1da5d851b92aeb81dbbb9ebd516f6e2588f5
Version < a7100601aa1a39f799a566acce10db20eaf4b7f2
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.15
Status affected
Version 0
Version < 4.15
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.072
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/fe9c591026c576d8b1f72aab5e4cd67350530763
https://git.kernel.org/stable/c/85f438382a865a4dc4c50e6b884310bb2b60fc4d
https://git.kernel.org/stable/c/320e5258a53af0abc5abd9eb01519a48bab2dee8
https://git.kernel.org/stable/c/a7100601aa1a39f799a566acce10db20eaf4b7f2
https://git.kernel.org/stable/c/3265d558dfafab8f12f5fba06ebbf15cae9f3225
https://git.kernel.org/stable/c/4681e731db07769846901cfabdd3e53f765eb9d3
https://git.kernel.org/stable/c/672ee1981db10569ec96030bddb322f18382ec04
https://git.kernel.org/stable/c/e6e79e7be87c5ea92728060a3d7fb56890a91e45