7.8

CVE-2026-93262

md/raid5-ppl: fix use-after-free in ppl_do_flush()

In the Linux kernel, the following vulnerability has been resolved:

md/raid5-ppl: fix use-after-free in ppl_do_flush()

The loop in ppl_do_flush() continues iterating after calling
ppl_io_unit_finished(), touching io->pending_flushes and leading to a
use-after-free.

Add a break statement to stop the loop once io is freed.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5
Version < cf01f9413565e86673baf927291a088b6975692b
Status affected
Version 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5
Version < e7505842f1329ece90cb9ea0db87772aeca44052
Status affected
Version 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5
Version < b5123bf667ac29ddd8106f9ca7cc01316513ae66
Status affected
Version 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5
Version < e77c80670f2c2bf491da9b173931e1da4677c23a
Status affected
Version 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5
Version < 8914c3d40870f16429a326e97e4016bedc6ede4c
Status affected
Version 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5
Version < 455b56209f9615c3902dcc398dd867abb5ade3ab
Status affected
Version 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5
Version < fcf21df7d3c50c8ebeb0757df5d21b02dcae4218
Status affected
Version 1532d9e87e8b2377f12929f9e40724d5fbe6ecc5
Version < 371f7a1b392edc8b7cf449cc7713179b588f2d0e
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.16
Status affected
Version 0
Version < 4.16
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.034
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/cf01f9413565e86673baf927291a088b6975692b
https://git.kernel.org/stable/c/e7505842f1329ece90cb9ea0db87772aeca44052
https://git.kernel.org/stable/c/b5123bf667ac29ddd8106f9ca7cc01316513ae66
https://git.kernel.org/stable/c/e77c80670f2c2bf491da9b173931e1da4677c23a
https://git.kernel.org/stable/c/8914c3d40870f16429a326e97e4016bedc6ede4c
https://git.kernel.org/stable/c/455b56209f9615c3902dcc398dd867abb5ade3ab
https://git.kernel.org/stable/c/fcf21df7d3c50c8ebeb0757df5d21b02dcae4218
https://git.kernel.org/stable/c/371f7a1b392edc8b7cf449cc7713179b588f2d0e