vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.21 % · centile 12 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Received
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter There is one race case in vduse_dev_msg_sync and vduse_dev_read_iter: vduse_dev_read_iter(): lock(msg_lock); dequeue_msg(send_list); unlock(msg_lock); vduse_dev_msg_sync(): wait_timeout() finish lock(msg_lock); check msg->complete is false list_del(msg); <- double list_del() crash! To fix this case, we shall ensure vduse_msg is on send_list or recv_list outside the msg_lock critical section.
Références
- https://git.kernel.org/stable/c/c83ad3dfa6d9953d5ce6839416bf5a1bfc50285a
- https://git.kernel.org/stable/c/09723f26ed801c083e914cec4cc0e1af4b933dc7
- https://git.kernel.org/stable/c/d7e7c813834c6c05c26033456ab7169e2f9c99eb
- https://git.kernel.org/stable/c/3755965adbb617f4283ac6ccd351ed0676843cba
- https://git.kernel.org/stable/c/d8715b5a8fdb23fef576700e71d0c253dbeddad4
- https://git.kernel.org/stable/c/8062ff9d366c4bc4ae775e14eac9a769f20c60dd
- https://git.kernel.org/stable/c/ae9c13b6fd79087cc5a216ee1649b6f012c2a238
Références européennes
- ENISA EUVD · EUVD-2026-59205
- GCVE · GCVE-0-2026-72306
Avis du CERT-FR
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1372 — Multiples vulnérabilités dans les produits SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1335 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1255 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected c8a6153b6c59d95c0e091f053f6f180952ade91e < c83ad3dfa6d9953d5ce6839416bf5a1bfc50285a ; affected c8a6153b6c59d95c0e091f053f6f180952ade91e < 09723f26ed801c083e914cec4cc0e1af4b933dc7 ; affected c8a6153b6c59d95c0e091f053f6f180952ade91e < d7e7c813834c6c05c26033456ab7169e2f9c99eb ; affected c8a6153b6c59d95c0e091f053f6f180952ade91e < 3755965adbb617f4283ac6ccd351ed0676843cba ; affected c8a6153b6c59d95c0e091f053f6f180952ade91e < d8715b5a8fdb23fef576700e71d0c253dbeddad4 ; affected c8a6153b6c59d95c0e091f053f6f180952ade91e < 8062ff9d366c4bc4ae775e14eac9a769f20c60dd |
| Linux · Linux | affected 5.15 ; unaffected 0 < 5.15 ; unaffected 5.15.212 ≤ 5.15.* ; unaffected 6.1.178 ≤ 6.1.* ; unaffected 6.6.145 ≤ 6.6.* ; unaffected 6.12.97 ≤ 6.12.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |