云虫漏洞情报

CVE-2026-80676 - In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: use generic driver_override infrastructure When a driver is probed through __driver_attach(), the bus' match() callback is called without the device lock held, thus accessing the driver_override field without a lock, which can cause a UAF. Fix this by using the driver-core driver_override infrastructure taking care of proper locking internally. Note that calling match() from __driver_atta - 漏洞详情

漏洞编号:CVE-2026-80676

风险等级:未知

漏洞来源:CVE

CVE 编号:CVE-2026-80676

CNNVD 编号:-

厂商/产品:- / -

影响范围:-

CWE:-

发布/更新时间:2026-08-28 / 2026-08-28

漏洞描述

In the Linux kernel, the following vulnerability has been resolved:

Drivers: hv: vmbus: use generic driver_override infrastructure

When a driver is probed through __driver_attach(), the bus' match()
callback is called without the device lock held, thus accessing the
driver_override field without a lock, which can cause a UAF.

Fix this by using the driver-core driver_override infrastructure taking
care of proper locking internally.

Note that calling match() from __driver_attach() without the device lock
held is intentional. [1]

相关链接

« 返回首页