PT-2026-84930 · Linux · Linux

CVE-2026-80732

·

Publicado

2026-09-03

·

Atualizado

2026-09-03

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the Linux kernel, the following vulnerability has been resolved:
ata: pata sl82c105: fix bridge revision use-after-free
pci get slot() returns a referenced PCI device. Commit 44c10138fd4b ("PCI: Change all drivers to use pci device->revision") replaced a configuration-space read with direct access to the cached revision field, but left that access after pci dev put(). The bridge may therefore be freed before its revision is read.
Read the revision before dropping the reference.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2026-80732

Produtos afetados

Linux