-

CVE-2026-98587

firewire: cdev: fix back-transition for iso_resource_auto client resource

In the Linux kernel, the following vulnerability has been resolved:

firewire: cdev: fix back-transition for iso_resource_auto client resource

The todo member of iso_resource_auto structure represents the state of the
client resource and normally transitions in the following order:

    ISO_RES_AUTO_ALLOC -> ISO_RES_AUTO_REALLOC -> ISO_RES_AUTO_DEALLOC

However, concurrent access from the work item and the file descriptor
release function can cause the state to transition backwards from
ISO_RES_AUTO_DEALLOC to ISO_RES_AUTO_REALLOC.

Prevent the back-transition by checking the current state before
updating it in the work item.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version fcabbf40fae501379b4f3a057febe92d4b0ebdd8
Version < ee1df60a0d0e8ab4b00137135733bdadd6d33dab
Status affected
Version fcabbf40fae501379b4f3a057febe92d4b0ebdd8
Version < c6b51091cafff9ce6c03c1416aa13864d17ab97c
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 7.2
Status affected
Version 0
Version < 7.2
Status unaffected
Version <= 7.2.*
Version 7.2.9
Status unaffected
Version <= *
Version 7.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.081
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/ee1df60a0d0e8ab4b00137135733bdadd6d33dab
https://git.kernel.org/stable/c/c6b51091cafff9ce6c03c1416aa13864d17ab97c