https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:48:22 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68317 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>pds_core: fix auxiliary device add/del races</p> <p>Two paths add or delete the same slot (pf-&gt;vfs[vf_id].padev): a VF&#39;s pdsc_reset_done() and the PF&#39;s devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly.</p> <p>add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer.</p> <p>Check and update the slot under config_lock in both paths.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>pds_core: fix auxiliary device add/del races</p> <p>Two paths add or delete the same slot (pf-&gt;vfs[vf_id].padev): a VF&#39;s pdsc_reset_done() and the PF&#39;s devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly.</p> <p>add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer.</p> <p>Check and update the slot under config_lock in both paths.</p> https://vulnerability.circl.lu/vuln/cve-2026-68317