Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2026/04/30 2:26 a.m.4 views

SUSE CVE-2026-31688

In the Linux kernel, the following vulnerability has been resolved: driver core: enforce devicelock for drivermatchdevice Currently, drivermatchdevice is called from three sites. One site deviceattachdriver holds devicelockdev, but the other two bindstore and driverattach do not. This inconsisten...

5.4AI score0.00017EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/28 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-31688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - driver core: enforce devicelock for drivermatchdevice Currently, drivermatchdevice is called from three sites. One site deviceattachdriver holds devicelockdev,...

7.8CVSS5.8AI score0.00017EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/04/27 10:22 p.m.2 views

CVE-2026-31688

A flaw was found in the Linux kernel's driver core. An inconsistency in enforcing the devicelock for drivermatchdevice can lead to a race condition. This issue, specifically when the driveroverride implementation is used, can result in a use-after-free UAF vulnerability. A use-after-free...

7.8CVSS5.8AI score0.00017EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/27 5:32 p.m.23 views

CVE-2026-31688 driver core: enforce device_lock for driver_match_device()

In the Linux kernel, the following vulnerability has been resolved: driver core: enforce devicelock for drivermatchdevice Currently, drivermatchdevice is called from three sites. One site deviceattachdriver holds devicelockdev, but the other two bindstore and driverattach do not. This inconsisten...

0.00017EPSS
Exploits0References1
CVE
CVE
added 2026/04/27 5:32 p.m.12 views

CVE-2026-31688

The CVE-2026-31688 issue concerns the Linux kernel driver core: driver_match_device() was called without the device_lock in two code paths (bind_store and __driver_attach), risking a race with bus match callbacks and a use-after-free when driver_override uses the lock. The fix introduces driver_m...

7.8CVSS5.4AI score0.00017EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/27 5:32 p.m.3 views

CVE-2026-31688

In the Linux kernel, the following vulnerability has been resolved: driver core: enforce devicelock for drivermatchdevice Currently, drivermatchdevice is called from three sites. One site deviceattachdriver holds devicelockdev, but the other two bindstore and driverattach do not. This inconsisten...

5.4AI score0.00017EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.7 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the drivermatchdevice function not holding a device lock, which may lead to race conditions...

7.8CVSS5.8AI score0.00017EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.1 views

PT-2026-35494

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A race condition exists in the driver core due to inconsistent locking in the driver match device function. While one call site holds the device lockdev, others such as bind store and...

7.8CVSS5.3AI score0.00017EPSS
Exploits0References15
Rows per page
Query Builder