Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Yin Fengwei

#46558de 53,635
5.5CVSS total
Vulnerabilidades · 1
PT-2026-26115
5.5
2026-01-01
Linux · Linux Kernel · CVE-2026-23255
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** The Linux kernel contains a flaw related to RCU (Read-Copy-Update) protection in the `/proc/net/ptype` interface. Specifically, the functions `ptype seq next()` and `ptype seq show()` do not adhere to RCU rules, potentially leading to RCU stalls. The issue arises because `ptype seq show()` reads `pt->dev` to obtain the device name without proper synchronization, while concurrent writers can remove packet type structures and clear `pt->dev` without an RCU grace period. The fix involves defining `ptype iter state` to carry a device pointer and adding full RCU protection to `ptype seq next()`, including the use of `READ ONCE()` when reading `list.next` values. A reproduction of the issue was provided by Dong Chenchen. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.