Boletines de Vulnerabilidades

CVE-2026-31480

   
Software afectado LINUX KERNEL
 
In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix potential deadlock in cpu hotplug with osnoise

The following sequence may leads deadlock in cpu hotplug:

task1 task2 task3
----- ----- -----

mutex_lock(&interface_lock)

[CPU GOING OFFLINE]

cpus_write_lock();
osnoise_cpu_die();
kthread_stop(task3);
wait_for_completion();

osnoise_sleep();
mutex_lock(&interface_lock);

cpus_read_lock();

[DEAD LOCK]

Fix by swap the order of cpus_read_lock() and mutex_lock(&interface_lock).

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-31480