Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-68317

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
10/08/2026
Última modificación:
10/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> pds_core: fix auxiliary device add/del races<br /> <br /> Two paths add or delete the same slot (pf-&gt;vfs[vf_id].padev): a VF&amp;#39;s<br /> pdsc_reset_done() and the PF&amp;#39;s devlink enable_vnet/disable_vnet handler.<br /> They serialize on config_lock, but neither guards the slot under it<br /> correctly.<br /> <br /> add() registers and stores a new auxiliary device without first checking<br /> the slot, so a second add of an already-populated slot leaks the first<br /> device. del() makes that check outside config_lock, so two concurrent<br /> dels can both pass it; the first clears the slot, and the second<br /> dereferences a NULL pointer.<br /> <br /> Check and update the slot under config_lock in both paths.

Impacto