CVE-2026-72482

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the gpib module. In the command ioctl() function, an error path inside a loop decrements the descriptor busy reference counter and breaks, but execution continues to an unconditional decrement after the loop. This causes the counter to underflow to -1, allowing a concurrent close dev ioctl() function to incorrectly identify an active gpib descriptor as unused and free it while it is still in use.

Recommendations Remove the early decrement from the error path in the command ioctl() function to ensure the reference counter is handled correctly by the post-loop decrement.