CVE-2026-72306
Description
In the Linux kernel, the following vulnerability has been resolved: vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter There is one race case in vduse_dev_msg_sync and vduse_dev_read_iter: vduse_dev_read_iter(): lock(msg_lock); dequeue_msg(send_list); unlock(msg_lock); vduse_dev_msg_sync(): wait_timeout() finish lock(msg_lock); check msg->complete is false list_del(msg); <- double list_del() crash! To fix this case, we shall ensure vduse_msg is on send_list or recv_list outside the msg_lock critical section.
How to fix
- Linux Linuxc83ad3dfa6d9953d5ce6839416bf5a1bfc50285a, 09723f26ed801c083e914cec4cc0e1af4b933dc7, d7e7c813834c6c05c26033456ab7169e2f9c99eb, 3755965adbb617f4283ac6ccd351ed0676843cba, d8715b5a8fdb23fef576700e71d0c253dbeddad4, 8062ff9d366c4bc4ae775e14eac9a769f20c60dd, ae9c13b6fd79087cc5a216ee1649b6f012c2a238 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | c8a6153b6c59d95c0e091f053f6f180952ade91e ≤ v < c83ad3dfa6d9953d5ce6839416bf5a1bfc50285a, c8a6153b6c59d95c0e091f053f6f180952ade91e ≤ v < 09723f26ed801c083e914cec4cc0e1af4b933dc7, c8a6153b6c59d95c0e091f053f6f180952ade91e ≤ v < d7e7c813834c6c05c26033456ab7169e2f9c99eb, c8a6153b6c59d95c0e091f053f6f180952ade91e ≤ v < 3755965adbb617f4283ac6ccd351ed0676843cba, c8a6153b6c59d95c0e091f053f6f180952ade91e ≤ v < d8715b5a8fdb23fef576700e71d0c253dbeddad4, c8a6153b6c59d95c0e091f053f6f180952ade91e ≤ v < 8062ff9d366c4bc4ae775e14eac9a769f20c60dd, c8a6153b6c59d95c0e091f053f6f180952ade91e ≤ v < ae9c13b6fd79087cc5a216ee1649b6f012c2a238, 5.15 | c83ad3dfa6d9953d5ce6839416bf5a1bfc50285a, 09723f26ed801c083e914cec4cc0e1af4b933dc7, d7e7c813834c6c05c26033456ab7169e2f9c99eb, 3755965adbb617f4283ac6ccd351ed0676843cba, d8715b5a8fdb23fef576700e71d0c253dbeddad4, 8062ff9d366c4bc4ae775e14eac9a769f20c60dd, ae9c13b6fd79087cc5a216ee1649b6f012c2a238 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.