Количество 5
Количество 5
CVE-2026-90334
(In the Linux kernel, the following vulnerability has been resolved: t ...)
CVE-2026-90334
In the Linux kernel, the following vulnerability has been resolved: tty: clear cdev pointer after cdev_add() failure tty_cdev_add() drops the cdev reference when cdev_add() fails, but leaves driver->cdevs[index] pointing to freed memory. tty_unregister_device() later passes that stale pointer to cdev_del(), causing a use-after-free. Clear the slot after dropping the reference.
CVE-2026-90334
tty: clear cdev pointer after cdev_add() failure
CVE-2026-90334
In the Linux kernel, the following vulnerability has been resolved: t ...
GHSA-346v-hcmm-349w
In the Linux kernel, the following vulnerability has been resolved: tty: clear cdev pointer after cdev_add() failure tty_cdev_add() drops the cdev reference when cdev_add() fails, but leaves driver->cdevs[index] pointing to freed memory. tty_unregister_device() later passes that stale pointer to cdev_del(), causing a use-after-free. Clear the slot after dropping the reference.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-90334 (In the Linux kernel, the following vulnerability has been resolved: t ...) | 0% Низкий | 4 дня назад | ||
CVE-2026-90334 In the Linux kernel, the following vulnerability has been resolved: tty: clear cdev pointer after cdev_add() failure tty_cdev_add() drops the cdev reference when cdev_add() fails, but leaves driver->cdevs[index] pointing to freed memory. tty_unregister_device() later passes that stale pointer to cdev_del(), causing a use-after-free. Clear the slot after dropping the reference. | 0% Низкий | 4 дня назад | ||
CVE-2026-90334 tty: clear cdev pointer after cdev_add() failure | 0% Низкий | 2 дня назад | ||
CVE-2026-90334 In the Linux kernel, the following vulnerability has been resolved: t ... | 0% Низкий | 4 дня назад | ||
GHSA-346v-hcmm-349w In the Linux kernel, the following vulnerability has been resolved: tty: clear cdev pointer after cdev_add() failure tty_cdev_add() drops the cdev reference when cdev_add() fails, but leaves driver->cdevs[index] pointing to freed memory. tty_unregister_device() later passes that stale pointer to cdev_del(), causing a use-after-free. Clear the slot after dropping the reference. | 0% Низкий | 4 дня назад |
Уязвимостей на страницу