CVE-2026-68317

pds_core: fix auxiliary device add/del races

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 17, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

pds_core: fix auxiliary device add/del races

Two paths add or delete the same slot (pf->vfs[vf_id].padev): a VF's pdsc_reset_done() and the PF's devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly.

add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer.

Check and update the slot under config_lock in both paths.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0861fccd43b8bafb533d97308862d20b7db3a2ad to before 646b58b543f3bb1641e9123b75ff7799fe7b42f1Affected f41e27b746241e57d968d1d61c008322338ca258 to before ef194751fed50cf3452017b63f00142a0ab40c70Affected b699bdc720c0255d1bb76cecba7382c1f2107af5 to before cf0ed2ba202f5c3b300ec1bf7ff0b5d555f7d518Affected b699bdc720c0255d1bb76cecba7382c1f2107af5 to before bdeab32a7a91acd295d52a2d4ab1cc3f2da5e454Affected b699bdc720c0255d1bb76cecba7382c1f2107af5 to before bfa33cd513c7ceb93c5a4c30e5662acd73c0a916Affected fec5f7af1d5f64a38f9224cd27b274d1af55a7edAffected 6.6.90 to before 6.6.148Affected 6.12.28 to before 6.12.101Affected 6.14.6 to before 6.15Affected
LinuxLinux	6.15Affected before 6.15Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

0861fccd43b8bafb533d97308862d20b7db3a2ad to before 646b58b543f3bb1641e9123b75ff7799fe7b42f1Affected
f41e27b746241e57d968d1d61c008322338ca258 to before ef194751fed50cf3452017b63f00142a0ab40c70Affected
b699bdc720c0255d1bb76cecba7382c1f2107af5 to before cf0ed2ba202f5c3b300ec1bf7ff0b5d555f7d518Affected
b699bdc720c0255d1bb76cecba7382c1f2107af5 to before bdeab32a7a91acd295d52a2d4ab1cc3f2da5e454Affected
b699bdc720c0255d1bb76cecba7382c1f2107af5 to before bfa33cd513c7ceb93c5a4c30e5662acd73c0a916Affected
fec5f7af1d5f64a38f9224cd27b274d1af55a7edAffected
6.6.90 to before 6.6.148Affected
6.12.28 to before 6.12.101Affected
6.14.6 to before 6.15Affected

LinuxLinux

6.15Affected
before 6.15Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.