PT-2026-106672 · Linux · Linux

CVE-2026-98343

·

Publicado

2026-10-06

·

Atualizado

2026-10-06

Nenhuma

Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: fix use-after-free in dma chan put() and dma release channel()
When dma device put() drops the last reference on chan->device->ref, dma device release() runs and may free the dma device along with its channels.
dma chan put() then still reads chan->device->owner via dma chan to owner() for the trailing module put(). KASAN catches it:
slab-use-after-free in dma chan put+0x3e6/0x4c0
Read of size 8 by task insmod/6319
Freed by task 6319:
 kfree+0x225/0x470
 dma chan put+0x395/0x4c0
 dmaengine put+0xf8/0x160
Cache the module owner in dma chan put() before the put so the trailing module put() does not need chan->device.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2026-98343

Produtos afetados

Linux