https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:35:23 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68327 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wan: wanxl: Only reset hardware after BAR mapping</p> <p>wanxl_pci_init_one() stores the freshly allocated card in driver data before the PLX BAR is mapped. Several early probe failures then unwind through wanxl_pci_remove_one(), including failure to allocate the coherent status area or to restore the DMA mask.</p> <p>wanxl_pci_remove_one() unconditionally calls wanxl_reset(), and wanxl_reset() dereferences card-&gt;plx. On those early failures card-&gt;plx is still NULL, so the error path can dereference a NULL MMIO pointer.</p> <p>Only issue the hardware reset once the BAR mapping exists. The remaining cleanup in wanxl_pci_remove_one() already checks whether later resources were allocated.</p> <p>This issue was found by a static analysis checker and confirmed by manual source review.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wan: wanxl: Only reset hardware after BAR mapping</p> <p>wanxl_pci_init_one() stores the freshly allocated card in driver data before the PLX BAR is mapped. Several early probe failures then unwind through wanxl_pci_remove_one(), including failure to allocate the coherent status area or to restore the DMA mask.</p> <p>wanxl_pci_remove_one() unconditionally calls wanxl_reset(), and wanxl_reset() dereferences card-&gt;plx. On those early failures card-&gt;plx is still NULL, so the error path can dereference a NULL MMIO pointer.</p> <p>Only issue the hardware reset once the BAR mapping exists. The remaining cleanup in wanxl_pci_remove_one() already checks whether later resources were allocated.</p> <p>This issue was found by a static analysis checker and confirmed by manual source review.</p> https://vulnerability.circl.lu/vuln/cve-2026-68327