-
CVE-2026-97412
- EPSS 0.17%
- Veröffentlicht 24.09.2026 16:03:19
- Zuletzt bearbeitet 25.09.2026 13:17:24
- Erkennungen
pds_core: quiesce DMA before freeing resources
In the Linux kernel, the following vulnerability has been resolved: pds_core: quiesce DMA before freeing resources pdsc_teardown() frees DMA buffers but does not disable bus mastering, leaving the device able to perform DMA after the buffers are freed. This can lead to use-after-free if the device writes to freed memory. Add pci_clear_master() to pdsc_teardown() to disable bus mastering before freeing resources, ensuring all DMA is quiesced. Add pci_set_master() to pdsc_setup() to re-enable bus mastering, which is needed for the firmware recovery path since pdsc_teardown() now disables it.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
45d76f492938cdc27ddadc16e1e75103f4cfbf56
Version <
cc8beb70e70fc90e54efdbc1128cf7de799e6be4
Status
affected
Version
45d76f492938cdc27ddadc16e1e75103f4cfbf56
Version <
9eee6b90bee3df496ed9094d9e76d5e478d72d0a
Status
affected
Version
45d76f492938cdc27ddadc16e1e75103f4cfbf56
Version <
6443f4f20bdae726fe01cf5946fba9742a0ffda6
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
6.4
Status
affected
Version
0
Version <
6.4
Status
unaffected
Version <=
6.12.*
Version
6.12.111
Status
unaffected
Version <=
6.18.*
Version
6.18.53
Status
unaffected
Version <=
*
Version
7.2
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.052 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/cc8beb70e70fc90e54efdbc1128cf7de799e6be4
https://git.kernel.org/stable/c/9eee6b90bee3df496ed9094d9e76d5e478d72d0a
https://git.kernel.org/stable/c/6443f4f20bdae726fe01cf5946fba9742a0ffda6