In the Linux kernel, the following vulnerability has been resolved: comedi: fix race between polling and detaching syzbot reports a use-after-free in comedi in the below link, which is due to comed…
高危 CVSS 7.3
摘要
In the Linux kernel, the following vulnerability has been resolved: comedi: fix race between polling and detaching syzbot reports a use-after-free in comedi in the below link, which is due to comedi gladly removing the allocated async area even though poll requests are still active on the wait_queue_head inside of it. This can cause a use-after-free when the poll entries are later triggered or removed, as the memory for the wait_queue_head has been freed. We need to check there are no tasks …
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/017198079551a2a5cf61eae966af3c4b145e1f3b Patch
- https://git.kernel.org/stable/c/0f989f9d05492028afd2bded4b42023c57d8a76e Patch
- https://git.kernel.org/stable/c/35b6fc51c666fc96355be5cd633ed0fe4ccf68b2 Patch
- https://git.kernel.org/stable/c/5724e82df4f9a4be62908362c97d522d25de75dd Patch
- https://git.kernel.org/stable/c/5c4a2ffcbd052c69bbf4680677d4c4eaa5a252d4 Patch
- https://git.kernel.org/stable/c/71ca60d2e631cf9c63bcbc7017961c61ff04e419 Patch
- https://git.kernel.org/stable/c/cd4286123d6948ff638ea9cd5818ae4796d5d252 Patch
- https://git.kernel.org/stable/c/d85fac8729c9acfd72368faff1d576ec585e5c8f Patch
- https://git.kernel.org/stable/c/fe67122ba781df44a1a9716eb1dfd751321ab512 Patch
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html
时间线
- nvd_ingest NVD