30 matches found
CVE-2026-98812
In the Linux kernel, the following vulnerability has been resolved: net/mctp: publish the mctpdev only after it is initialised mctpadddev links the new mctpdev into dev-mctpptr before mdev-dev is assigned, so a reader that picks the device up in that window dereferences a netdevice pointer that i...
EUVD-2026-103897
In the Linux kernel, the following vulnerability has been resolved: net/mctp: publish the mctpdev only after it is initialised mctpadddev links the new mctpdev into dev-mctpptr before mdev-dev is assigned, so a reader that picks the device up in that window dereferences a netdevice pointer that i...
CVE-2026-98812
A vulnerability exists in the Linux kernel 's net/mctp component where the mctp_add_dev() function incorrectly links a new mctp_dev into dev->mctp_ptr before the mdev->dev pointer is assigned. This race condition allows a reader to pick up the device in a window where it still points to NUL...
CVE-2026-98812
In the Linux kernel, the following vulnerability has been resolved: net/mctp: publish the mctpdev only after it is initialised mctpadddev links the new mctpdev into dev-mctpptr before mdev-dev is assigned, so a reader that picks the device up in that window dereferences a netdevice pointer that i...
CVE-2026-98812 net/mctp: publish the mctp_dev only after it is initialised
In the Linux kernel, the following vulnerability has been resolved: net/mctp: publish the mctpdev only after it is initialised mctpadddev links the new mctpdev into dev-mctpptr before mdev-dev is assigned, so a reader that picks the device up in that window dereferences a netdevice pointer that i...
ROS-20261012-73-0060
The vulnerability of the mctpflowprepareoutput function in the net/mctp/route.c module of the Linux kernel is related to deficiencies in the deserialization mechanism, due to insufficient protection of sensitive data. Exploiting this vulnerability allows an attacker to compromise the...
CVE-2026-98018
In the Linux kernel, the following vulnerability has been resolved: net: mctp: i3c: serialize probe with bus removal mctpi3cprobe drops busdevslock after finding the matching bus. A concurrent I3CNOTIFYBUSREMOVE can then unregister and free the bus netdev before probe passes its private data to...
CVE-2026-98018
A vulnerability exists in the Linux kernel within the net: mctp: i3c component. The root cause is that mctp_i3c_probe() drops the busdevs_lock prematurely after finding the matching bus. This allows a concurrent I3C_NOTIFY_BUS_REMOVE event to unregister and free the bus netdev before the probe ca...
CVE-2026-98018: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: mctp: i3c: serialize probe with bus removal mctpi3cprobe drops busdevslock after finding the matching bus. A concurrent I3CNOTIFYBUSREMOVE can then unregister and free the bus netdev before probe passes its private data to...
CVE-2026-63874
In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rxretry cancellation It's possible that sequencing between setting -stopped and cancelling the rxretry work in ndostop could leave us with an urb queued: T1: ndostop T2:...
CVE-2026-63874
In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rxretry cancellation It's possible that sequencing between setting -stopped and cancelling the rxretry work in ndostop could leave us with an urb queued: T1: ndostop T2:...
CVE-2026-63874 net: mctp: usb: fix race between urb completion and rx_retry cancellation
In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rxretry cancellation It's possible that sequencing between setting -stopped and cancelling the rxretry work in ndostop could leave us with an urb queued: T1: ndostop T2:...
CVE-2026-63874 net: mctp: usb: fix race between urb completion and rx_retry cancellation
In the Linux kernel, the following vulnerability has been resolved: net: mctp: usb: fix race between urb completion and rxretry cancellation It's possible that sequencing between setting -stopped and cancelling the rxretry work in ndostop could leave us with an urb queued: T1: ndostop T2:...
CVE-2026-45930
In the Linux kernel, the following vulnerability has been resolved: net: mctp: ensure our nlmsg responses are initialised Syed Faraz Abrar @farazsth98 from Zellic, and Pumpkin @u1f383 from DEVCORE Research Team working with Trend Micro Zero Day Initiative report that a RTMGETNEIGH will return...
CVE-2026-45930 net: mctp: ensure our nlmsg responses are initialised
In the Linux kernel, the following vulnerability has been resolved: net: mctp: ensure our nlmsg responses are initialised Syed Faraz Abrar @farazsth98 from Zellic, and Pumpkin @u1f383 from DEVCORE Research Team working with Trend Micro Zero Day Initiative report that a RTMGETNEIGH will return...
CVE-2026-45930: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: mctp: ensure our nlmsg responses are initialised Syed Faraz Abrar @farazsth98 from Zellic, and Pumpkin @u1f383 from DEVCORE Research Team working with Trend Micro Zero Day Initiative report that a RTMGETNEIGH will return...
Linux kernel 安全漏洞
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the uninitialized data in the RTMGETNEIGH response message in the net/mctp module. This could lead to t...
CVE-2026-43375
In the Linux kernel, the following vulnerability has been resolved: net: mctp: fix device leak on probe failure Driver core holds a reference to the USB interface and its parent USB device while the interface is bound to a driver and there is no need to take additional references unless the...
CVE-2026-43375
CVE-2026-43375 concerns the Linux kernel in the MCTP path. A leak occurs during probe failures because the driver saves a reference to the USB device but fails to release it on error paths. The fix drops the redundant device reference to prevent memory leaks when the probe fails, simplifying driv...
CVE-2026-43375
In the Linux kernel, the following vulnerability has been resolved: net: mctp: fix device leak on probe failure Driver core holds a reference to the USB interface and its parent USB device while the interface is bound to a driver and there is no need to take additional references unless the...