7

CVE-2026-93121

usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths

The error paths for endpoint-disabled (ESHUTDOWN) and request-allocation
failure (ENOMEM) in ffs_dmabuf_transfer() jump to err_fence_put which
calls dma_fence_put() on the fence. However, at that point the fence has
only been kmalloc'd — dma_fence_init() has not been called yet, so the
refcount and the fence ops are uninitialized. Calling dma_fence_put() on
such an object leads to undefined behavior.

Use kfree() instead, since the fence is just a plain allocation at this
stage, and rename the label to err_fence_free to reflect the actual
cleanup action.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 7b07a2a7ca02a20124b552be96c5a56910795488
Version < be539138d9a187af3b884525a395db10797c64f1
Status affected
Version 7b07a2a7ca02a20124b552be96c5a56910795488
Version < 5fd8baacc7dc477df9cac61b45491840247a9b1e
Status affected
Version 7b07a2a7ca02a20124b552be96c5a56910795488
Version < 58952c83dfe6ea3294a74734d2d1018c1120779a
Status affected
Version 7b07a2a7ca02a20124b552be96c5a56910795488
Version < 621707dc67c9846fd876d7579ec951d92aa033f1
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.9
Status affected
Version 0
Version < 6.9
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.041
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/be539138d9a187af3b884525a395db10797c64f1
https://git.kernel.org/stable/c/5fd8baacc7dc477df9cac61b45491840247a9b1e
https://git.kernel.org/stable/c/58952c83dfe6ea3294a74734d2d1018c1120779a
https://git.kernel.org/stable/c/621707dc67c9846fd876d7579ec951d92aa033f1