Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-89998

dm: fix race when loading and unloading a table

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dm_setup_md_queue walks &md->table_devices without any lock. If the walk races with dm_table_destroy -> free_devices -> dm_put_table_device, there is access to invalid memory. Fix this race by extending the lock over the list walk.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 773bfda35c9511734d7f898e2ee73cd60d2a3f38 to < b02e35b81176c7d61dd441cc7a2e5c324a82444baffected
  • 1a581b72169968f4154b5793828f3bc28b258b35 to < 0ea6e5ad4a5817e91f11b4cc1e022e575ed2e7caaffected
  • 1a581b72169968f4154b5793828f3bc28b258b35 to < a1af1884c960b98c621b6fe2fea1216b78c02152affected
  • 1a581b72169968f4154b5793828f3bc28b258b35 to < af1f32ccf8051f4691ced11feb452b9d13561727affected
  • 1a581b72169968f4154b5793828f3bc28b258b35 to < 00ad6f9ed27f91925d4d3fb7aab50a60d774f998affected
  • 1a581b72169968f4154b5793828f3bc28b258b35 to < 5380c7f6335cc6d77eb77d065105e81155c4d9d3affected
  • 600593707c239bb99486925d65540a5020bc1e58affected
  • 6.1.2 to < 6.1.188affected
  • 6.0.16 to < 6.1affected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.1.188 to ≤ 6.1.*unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.51 to ≤ 6.18.*unaffected
  • 7.2.5 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References