-

CVE-2026-98016

net/mlx5e: Fix use-after-free race in sample_restore_put()

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix use-after-free race in sample_restore_put()

Concurrent teardown of TC sample rules sharing the same restore
context may re-read restore->count after dropping restore_lock.
At that point another thread may already have completed cleanup and
freed the restore object.

Use the result of the refcount decrement while holding restore_lock to
determine whether cleanup is needed.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 36a3196256bf3310e5e7142b0e61787f7a201abd
Version < cdf920e44cbbee1900c66f002fb50afee20977d4
Status affected
Version 36a3196256bf3310e5e7142b0e61787f7a201abd
Version < 308e1cbb0d9712081f90860fe839ccb47bc196ee
Status affected
Version 36a3196256bf3310e5e7142b0e61787f7a201abd
Version < 8267e46d14e847e80e0aebe366d348e8a484a619
Status affected
Version 36a3196256bf3310e5e7142b0e61787f7a201abd
Version < 3efd1a1938cbb33c53b0d75e55b6c0fe2ebad79a
Status affected
Version 36a3196256bf3310e5e7142b0e61787f7a201abd
Version < 72324da8eeca269db9196c2a555abf72eb0385c5
Status affected
Version 36a3196256bf3310e5e7142b0e61787f7a201abd
Version < 1daecd76ab9e5f055fe3970462410ad1d40bd177
Status affected
Version 36a3196256bf3310e5e7142b0e61787f7a201abd
Version < af3aef0245abbab5e9f6302e7a7d6407187afb71
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.13
Status affected
Version 0
Version < 5.13
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.054
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/3efd1a1938cbb33c53b0d75e55b6c0fe2ebad79a
https://git.kernel.org/stable/c/72324da8eeca269db9196c2a555abf72eb0385c5
https://git.kernel.org/stable/c/1daecd76ab9e5f055fe3970462410ad1d40bd177
https://git.kernel.org/stable/c/af3aef0245abbab5e9f6302e7a7d6407187afb71
https://git.kernel.org/stable/c/308e1cbb0d9712081f90860fe839ccb47bc196ee
https://git.kernel.org/stable/c/8267e46d14e847e80e0aebe366d348e8a484a619
https://git.kernel.org/stable/c/cdf920e44cbbee1900c66f002fb50afee20977d4