7.8

CVE-2026-89998

dm: fix race when loading and unloading a table

In the Linux kernel, the following vulnerability has been resolved:

dm: fix race when loading and unloading a table

If the userspace calls two concurrent table load ioctls and one of them
succeeds and the other fails, there is a race condition because
dm_setup_md_queue walks &md->table_devices without any lock. If the walk
races with dm_table_destroy -> free_devices -> dm_put_table_device, there
is access to invalid memory.

Fix this race by extending the lock over the list walk.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 773bfda35c9511734d7f898e2ee73cd60d2a3f38
Version < b02e35b81176c7d61dd441cc7a2e5c324a82444b
Status affected
Version 1a581b72169968f4154b5793828f3bc28b258b35
Version < 0ea6e5ad4a5817e91f11b4cc1e022e575ed2e7ca
Status affected
Version 1a581b72169968f4154b5793828f3bc28b258b35
Version < a1af1884c960b98c621b6fe2fea1216b78c02152
Status affected
Version 1a581b72169968f4154b5793828f3bc28b258b35
Version < af1f32ccf8051f4691ced11feb452b9d13561727
Status affected
Version 1a581b72169968f4154b5793828f3bc28b258b35
Version < 00ad6f9ed27f91925d4d3fb7aab50a60d774f998
Status affected
Version 1a581b72169968f4154b5793828f3bc28b258b35
Version < 5380c7f6335cc6d77eb77d065105e81155c4d9d3
Status affected
Version 600593707c239bb99486925d65540a5020bc1e58
Status affected
Version 6.1.2
Version < 6.1.188
Status affected
Version 6.0.16
Version < 6.1
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.2
Status affected
Version 0
Version < 6.2
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.51
Status unaffected
Version <= 7.2.*
Version 7.2.5
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.06
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b02e35b81176c7d61dd441cc7a2e5c324a82444b
https://git.kernel.org/stable/c/0ea6e5ad4a5817e91f11b4cc1e022e575ed2e7ca
https://git.kernel.org/stable/c/a1af1884c960b98c621b6fe2fea1216b78c02152
https://git.kernel.org/stable/c/af1f32ccf8051f4691ced11feb452b9d13561727
https://git.kernel.org/stable/c/00ad6f9ed27f91925d4d3fb7aab50a60d774f998
https://git.kernel.org/stable/c/5380c7f6335cc6d77eb77d065105e81155c4d9d3