Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-68327

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
10/08/2026
Última modificación:
10/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> wan: wanxl: Only reset hardware after BAR mapping<br /> <br /> wanxl_pci_init_one() stores the freshly allocated card in driver data<br /> before the PLX BAR is mapped. Several early probe failures then unwind<br /> through wanxl_pci_remove_one(), including failure to allocate the coherent<br /> status area or to restore the DMA mask.<br /> <br /> wanxl_pci_remove_one() unconditionally calls wanxl_reset(), and<br /> wanxl_reset() dereferences card-&gt;plx. On those early failures card-&gt;plx<br /> is still NULL, so the error path can dereference a NULL MMIO pointer.<br /> <br /> Only issue the hardware reset once the BAR mapping exists. The remaining<br /> cleanup in wanxl_pci_remove_one() already checks whether later resources<br /> were allocated.<br /> <br /> This issue was found by a static analysis checker and confirmed by<br /> manual source review.

Impacto