-

CVE-2026-90319

rapidio: clear mport->net when rio_add_net() fails

In the Linux kernel, the following vulnerability has been resolved:

rapidio: clear mport->net when rio_add_net() fails

rio_alloc_net() stores the newly allocated rio_net in mport->net before
rio_scan_alloc_net() registers the device.

If rio_add_net() fails, rio_scan_alloc_net() drops the device reference
with put_device(), which releases the rio_net through the device release
callback.  However, mport->net is left pointing at the freed object.

A later mport unregister path can then dereference the dangling mport->net
pointer and may try to free the same rio_net again.

Clear mport->net in the rio_add_net() failure path, matching the cleanup
done for the destID table allocation failure path.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4f3509cfcc02e9d757f2714bb7dbbeec35de6fa7
Version < 24f60ebabeb8757cec8ec2f97660d521bc9147ec
Status affected
Version 181d4daaefb3bceeb2f2635ba9f3781eeda9e550
Version < 6a760a53e73064735cdfa9e51c664983a89baf96
Status affected
Version ad82be4298a89a9ae46f07128bdf3d8614bce745
Version < 3f00999e44d9984036a029dbad9d2afe94a674d0
Status affected
Version e6411c3b9512dba09af7d014d474516828c89706
Version < 332591a245de978349a7558f8b20469951bb77cc
Status affected
Version c332f3e2df0fcae5a45fd55cc18902fb1e4825ca
Version < 75f0bc167b96bbbef8182b88308c732af82c8d83
Status affected
Version e842f9a1edf306bf36fe2a4d847a0b0d458770de
Version < 44a37264b26911e13d0a4f5630751c4157ed0354
Status affected
Version e842f9a1edf306bf36fe2a4d847a0b0d458770de
Version < 530a9d5ef831a0049dad9a6b2b92d02301352c38
Status affected
Version e842f9a1edf306bf36fe2a4d847a0b0d458770de
Version < b74030fbf187b43c1f85b66a7082e9946511cb5d
Status affected
Version 6d22953c4a183d0b7fdf34d68c5debd16da6edc5
Status affected
Version a0d069ccc475abaaa79c6368ee27fc0b5912bea8
Status affected
Version 5.10.235
Version < 5.10.270
Status affected
Version 5.15.179
Version < 5.15.221
Status affected
Version 6.1.131
Version < 6.1.188
Status affected
Version 6.6.83
Version < 6.6.157
Status affected
Version 6.12.19
Version < 6.12.110
Status affected
Version 5.4.291
Version < 5.5
Status affected
Version 6.13.7
Version < 6.14
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.14
Status affected
Version 0
Version < 6.14
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.116
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/24f60ebabeb8757cec8ec2f97660d521bc9147ec
https://git.kernel.org/stable/c/6a760a53e73064735cdfa9e51c664983a89baf96
https://git.kernel.org/stable/c/3f00999e44d9984036a029dbad9d2afe94a674d0
https://git.kernel.org/stable/c/332591a245de978349a7558f8b20469951bb77cc
https://git.kernel.org/stable/c/75f0bc167b96bbbef8182b88308c732af82c8d83
https://git.kernel.org/stable/c/44a37264b26911e13d0a4f5630751c4157ed0354
https://git.kernel.org/stable/c/530a9d5ef831a0049dad9a6b2b92d02301352c38
https://git.kernel.org/stable/c/b74030fbf187b43c1f85b66a7082e9946511cb5d