CVE-2026-68317

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the pds core component when adding or deleting auxiliary devices in the slot pf->vfs[vf id].padev. This occurs between the pdsc reset done() function of a Virtual Function (VF) and the enable vnet/disable vnet handlers of the Physical Function (PF) devlink. While these paths use config lock for serialization, the slot is not guarded correctly. Specifically, the add() function may leak a device if a slot is already populated, and the del() function may cause a NULL pointer dereference if two deletions occur concurrently because the slot check is performed outside the config lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.