网安资讯详情 - SecLens 情报雷达

CVE-2026-31399

来源： alibaba_cloud_linux_cve · 发布时间 2026-05-29 15:15 (UTC+08:00) · 抓取时间 2026-05-29 16:10 (UTC+08:00)

原文链接

摘要

In the Linux kernel, the following vulnerability has been resolved: nvdimm/bus: Fix potential use after free in asynchronous initialization Dingisoul with KASAN reports a use after free if device_add() fails in nd_async_device_register(). Commit b6eae0f61db2 ("libnvdimm: Hold reference on parent while scheduling async init") correctly added a reference on the parent device to be held until asynchronous initialization was complete. However, if device_add() results in an allocation failure the ref count of the device drops to 0 prior to the parent pointer being accessed. Thus resulting in use after free. The bug bot AI correctly identified the fix. Save a reference to the parent pointer to be used to drop the parent reference regardless of the outcome of device_add().

标签

• cve:cve-2026-31399
• type:cve
• vendor:alibaba

扩展字段

{
  "cve_id": "CVE-2026-31399",
  "raw_pub_date": "Fri, 29 May 2026 15:15:14 +0800"
}