ffs

FFS - F 파일 시스템 이것은 파일을 검색하기 위한 CLI 도구로grep처럼, OS 커널을 사용해 파일을 읽지 않고 디스크를 직접 읽습니다. 실질적으로는 쓸모없지만 미친 듯이 멋집니다. 이것은 단지 약 1.5k줄의 C 코드로 구성되어 있으며: raw 디바이스 노드예: /dev/rdisk를 읽을 때만 sudo가 필요합니다. 이미지 파일을 검색할 때는 높은 권한이 필요 없습니다. macOS 기본 디스크에서 실행하려면 SIP 보호를 비활성화해야 합니다. 최근에 쓴 일부 파일을 놓칠 수 있습니다수동으로 sync 호출이 필요할 수...

SUSE CVE-2026-90045

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

AZL-101166 CVE-2026-90045 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

CVE-2026-90045

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

EUVD-2026-80653

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

CVE-2026-90045 USB: gadget: ffs: fix mm lifetime handling

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

CVE-2026-90045

CVE-2026-90045 is a use-after-free vulnerability in the Linux kernel 's USB gadget FunctionFS (ffs) driver. The io_data structure stores a pointer to the submitting task's mm_struct but fails to hold a reference while asynchronous requests remain pending. If the task exits before completion handl...

CVE-2026-90045 USB: gadget: ffs: fix mm lifetime handling

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

Linux Distros Unpatched Vulnerability : CVE-2026-90045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async...

PT-2026-93685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free issue exists in the USB gadget functionfs module. In the ffs epfile write iter and ffs epfile read iter functions, when ffs epfile io fails with an error other than...

CVE-2026-90045: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fixed race between aiocancel and AIO request complete FFS-based applications can utilize the aiocancel callback to dequeue pending USB requests submitted to the UDC. There is a scenario where the FFS application...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fixed null pointer access to epfile after ep enable. A race condition occurs when ffsfuncepsenable runs concurrently with ffsdatareset. The ffsdataclear function called in ffsdatareset sets ffs-epfiles to NULL...

PT-2026-90448

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the USB gadget functionfs module when a userspace daemon polls ep0 via a read operation while the gadget is asynchronously torn down via configfs. The issue arise...

PT-2026-70965

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop bug exists in the NCQ completion path of the sata dwc 460ex driver. When the tag mask variable contains only high bits, the inner while loop continues to left-shift the...

EUVD-2026-53781

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: initialize resetwork at allocation time ffsfskillsb unconditionally calls cancelworksync on ffs-resetwork when a functionfs instance is unmounted: ffsdataresetffs; cancelworksync&ffs-resetwork; However...

CVE-2026-64328

A flaw was found in the Linux kernel's USB gadget subsystem. Specifically, a DMA Direct Memory Access fence leak exists in the ffs module's ffsdmabuftransfer function. This issue causes ffsdmafence objects to be allocated without their initial reference being properly released. Repeated...

EUVD-2026-48872

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fix DMA fence leak In ffsdmabuftransfer, a ffsdmafence object is kmalloc'd, with the underlying dmafence later initialized by dmafenceinit, which sets its kref counter to 1. Then, dmaresvaddfence gets a second...

EUVD-2026-48871

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Initialize epfile-in early to fix endpoint direction checks When parsing endpoint descriptors, ffsdatagotdescs generates the epsaddrmap which contains the endpoint direction. However, epfile-in was previously on...

CVE-2026-64327 usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Initialize epfile-in early to fix endpoint direction checks When parsing endpoint descriptors, ffsdatagotdescs generates the epsaddrmap which contains the endpoint direction. However, epfile-in was previously on...