-

CVE-2026-98018

net: mctp: i3c: serialize probe with bus removal

In the Linux kernel, the following vulnerability has been resolved:

net: mctp: i3c: serialize probe with bus removal

mctp_i3c_probe() drops busdevs_lock after finding the matching bus. A
concurrent I3C_NOTIFY_BUS_REMOVE can then unregister and free the bus
netdev before probe passes its private data to mctp_i3c_add_device().
The latter consequently adds a list node through a freed mbus pointer.

Keep busdevs_lock held until the device has been added. This also
satisfies the __must_hold annotation on mctp_i3c_add_device().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version c8755b29b58ec65be17bcb8c40763d2dcb1f1db5
Version < e6541b2747682fdb2c6ded4a7cf7c39c4067a35c
Status affected
Version c8755b29b58ec65be17bcb8c40763d2dcb1f1db5
Version < 765c5e357e67916a7aac8ead4ac2fa7d2bffe000
Status affected
Version c8755b29b58ec65be17bcb8c40763d2dcb1f1db5
Version < 906d8dbafabfa81a30e3ade420cb9912f223a5e1
Status affected
Version c8755b29b58ec65be17bcb8c40763d2dcb1f1db5
Version < 2b4707a149a55e8fa75c9ef32b359d60f470a566
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.7
Status affected
Version 0
Version < 6.7
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.054
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/e6541b2747682fdb2c6ded4a7cf7c39c4067a35c
https://git.kernel.org/stable/c/765c5e357e67916a7aac8ead4ac2fa7d2bffe000
https://git.kernel.org/stable/c/906d8dbafabfa81a30e3ade420cb9912f223a5e1
https://git.kernel.org/stable/c/2b4707a149a55e8fa75c9ef32b359d60f470a566