Riskcovery

CVE-2026-98018

net: mctp: i3c: serialize probe with bus removal

State
Published
Severity
Not scored
Published
Sep 25, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: mctp: i3c: serialize probe with bus removal

mctp_i3c_probe() drops busdevs_lock after finding the matching bus. A concurrent I3C_NOTIFY_BUS_REMOVE can then unregister and free the bus netdev before probe passes its private data to mctp_i3c_add_device(). The latter consequently adds a list node through a freed mbus pointer.

Keep busdevs_lock held until the device has been added. This also satisfies the __must_hold annotation on mctp_i3c_add_device().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c8755b29b58ec65be17bcb8c40763d2dcb1f1db5 to before e6541b2747682fdb2c6ded4a7cf7c39c4067a35cAffected
  • c8755b29b58ec65be17bcb8c40763d2dcb1f1db5 to before 765c5e357e67916a7aac8ead4ac2fa7d2bffe000Affected
  • c8755b29b58ec65be17bcb8c40763d2dcb1f1db5 to before 906d8dbafabfa81a30e3ade420cb9912f223a5e1Affected
  • c8755b29b58ec65be17bcb8c40763d2dcb1f1db5 to before 2b4707a149a55e8fa75c9ef32b359d60f470a566Affected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2.7 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.