Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-98016

net/mlx5e: Fix use-after-free race in sample_restore_put()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free race in sample_restore_put() Concurrent teardown of TC sample rules sharing the same restore context may re-read restore->count after dropping restore_lock. At that point another thread may already have completed cleanup and freed the restore object. Use the result of the refcount decrement while holding restore_lock to determine whether cleanup is needed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 36a3196256bf3310e5e7142b0e61787f7a201abd to < cdf920e44cbbee1900c66f002fb50afee20977d4affected
  • 36a3196256bf3310e5e7142b0e61787f7a201abd to < 308e1cbb0d9712081f90860fe839ccb47bc196eeaffected
  • 36a3196256bf3310e5e7142b0e61787f7a201abd to < 8267e46d14e847e80e0aebe366d348e8a484a619affected
  • 36a3196256bf3310e5e7142b0e61787f7a201abd to < 3efd1a1938cbb33c53b0d75e55b6c0fe2ebad79aaffected
  • 36a3196256bf3310e5e7142b0e61787f7a201abd to < 72324da8eeca269db9196c2a555abf72eb0385c5affected
  • 36a3196256bf3310e5e7142b0e61787f7a201abd to < 1daecd76ab9e5f055fe3970462410ad1d40bd177affected
  • 36a3196256bf3310e5e7142b0e61787f7a201abd to < af3aef0245abbab5e9f6302e7a7d6407187afb71affected

Linux Linux

Default version status: affected

  • 5.13affected
  • 0 to < 5.13unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2.7 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References