ffs

FFS - نظام الملفات F هذه أداة سطر أوامر للبحث في الملفات مثل grep لا تستخدم نواة نظام التشغيل لقراءة الملفات، بل تقرأ أقراصك مباشرة. إنها عديمة الفائدة عمليًا، ولكنها رائعة بشكل جنوني. هذا مجرد 1.5k سطر من كود C يقوم بـ: يتطلب صلاحيات sudo فقط عند قراءة عقدة جهاز خام مثل /dev/rdisk؛ البحث في ملف...

CVE-2026-98176

The Linux kernel contains an integer underflow vulnerability in the drm/amdkfd component. The issue occurs because the base-2 logarithm of the EOP ring size was calculated using a formula that could underflow if the ffs function returned 1 or 0. While the ring buffer size is practically restricte...

Linux Distros Unpatched Vulnerability : CVE-2026-98176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc The low 6 bits of cphqdeopcontrol store the base-2 logarithm of the EOP ring size. This was...

SUSE CVE-2026-90045

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

PT-2026-94917

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ffs dmabuf transfer function within the USB gadget f fs module. In error paths related to endpoint-disabled ESHUTDOWN and request-allocation failure ENOMEM, the...

AZL-101166 CVE-2026-90045 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

CVE-2026-90045

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

CVE-2026-90045

CVE-2026-90045 is a use-after-free vulnerability in the Linux kernel 's USB gadget FunctionFS (ffs) driver. The io_data structure stores a pointer to the submitting task's mm_struct but fails to hold a reference while asynchronous requests remain pending. If the task exits before completion handl...

EUVD-2026-80653

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

CVE-2026-90045 USB: gadget: ffs: fix mm lifetime handling

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

CVE-2026-90045 USB: gadget: ffs: fix mm lifetime handling

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

CVE-2026-90045: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async requests are pending. This can result in a use-after-free if the task...

PT-2026-93685

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free issue exists in the USB gadget functionfs module. In the ffs epfile write iter and ffs epfile read iter functions, when ffs epfile io fails with an error other than...

Linux Distros Unpatched Vulnerability : CVE-2026-90045

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: gadget: ffs: fix mm lifetime handling iodata stores a pointer to the submitting task's mmstruct, but does not currently hold a reference to it while async...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fixed race between aiocancel and AIO request complete FFS-based applications can utilize the aiocancel callback to dequeue pending USB requests submitted to the UDC. There is a scenario where the FFS application...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Fixed null pointer access to epfile after ep enable. A race condition occurs when ffsfuncepsenable runs concurrently with ffsdatareset. The ffsdataclear function called in ffsdatareset sets ffs-epfiles to NULL...

PT-2026-90448

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock can occur in the USB gadget functionfs module when a userspace daemon polls ep0 via a read operation while the gadget is asynchronously torn down via configfs. The issue arise...

PT-2026-70965

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop bug exists in the NCQ completion path of the sata dwc 460ex driver. When the tag mask variable contains only high bits, the inner while loop continues to left-shift the...

EUVD-2026-53781

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: initialize resetwork at allocation time ffsfskillsb unconditionally calls cancelworksync on ffs-resetwork when a functionfs instance is unmounted: ffsdataresetffs; cancelworksync&ffs-resetwork; However...

CVE-2026-64328

A flaw was found in the Linux kernel's USB gadget subsystem. Specifically, a DMA Direct Memory Access fence leak exists in the ffs module's ffsdmabuftransfer function. This issue causes ffsdmafence objects to be allocated without their initial reference being properly released. Repeated...