https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 23:17:35 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74313 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>vduse: hold vduse_lock across IDR lookup in open path</p> <p>vduse_dev_open() looks up struct vduse_dev through the IDR and then acquires dev-&gt;lock only after vduse_lock has been dropped.</p> <p>This leaves a window where a concurrent VDUSE_DESTROY_DEV can remove the same object from the IDR and free it before the open path locks the device, leading to a use-after-free.</p> <p>Close this race by keeping vduse_lock held until dev-&gt;lock has been acquired in the open path, matching the lock ordering already used by the destroy path.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>vduse: hold vduse_lock across IDR lookup in open path</p> <p>vduse_dev_open() looks up struct vduse_dev through the IDR and then acquires dev-&gt;lock only after vduse_lock has been dropped.</p> <p>This leaves a window where a concurrent VDUSE_DESTROY_DEV can remove the same object from the IDR and free it before the open path locks the device, leading to a use-after-free.</p> <p>Close this race by keeping vduse_lock held until dev-&gt;lock has been acquired in the open path, matching the lock ordering already used by the destroy path.</p> https://vulnerability.circl.lu/vuln/cve-2026-74313