CVE-2026-68317pds_core: fix auxiliary device add/del races
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: pds_core: fix auxiliary device add/del races Two paths add or delete the same slot (pf->vfs[vf_id].padev): a VF's pdsc_reset_done() and the PF's devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly. add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer. Check and update the slot under config_lock in both paths.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 0861fccd43b8bafb533d97308862d20b7db3a2ad builds before 646b58b543f3bb1641e9123b75ff7799fe7b42f1; from f41e27b746241e57d968d1d61c008322338ca258 before ef194751fed50cf3452017b63f00142a0ab40c70; from b699bdc720c0255d1bb76cecba7382c1f2107af5 before cf0ed2ba202f5c3b300ec1bf7ff0b5d555f7d518; from b699bdc720c0255d1bb76cecba7382c1f2107af5 before bdeab32a7a91acd295d52a2d4ab1cc3f2da5e454; from b699bdc720c0255d1bb76cecba7382c1f2107af5 before bfa33cd513c7ceb93c5a4c30e5662acd73c0a916; fec5f7af1d5f64a38f9224cd27b274d1af55a7ed; from 6.6.90 before 6.6.148; from 6.12.28 before 6.12.101; and 1 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/646b58b543f3bb1641e9123b75ff7799fe7b42f1
- https://git.kernel.org/stable/c/ef194751fed50cf3452017b63f00142a0ab40c70
- https://git.kernel.org/stable/c/cf0ed2ba202f5c3b300ec1bf7ff0b5d555f7d518
- https://git.kernel.org/stable/c/bdeab32a7a91acd295d52a2d4ab1cc3f2da5e454
- https://git.kernel.org/stable/c/bfa33cd513c7ceb93c5a4c30e5662acd73c0a916
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.