https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:51:22 +0000 https://db.gcve.eu/vuln/cve-2026-52979 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: psp: check for device unregister when creating assoc</p> <p>psp_assoc_device_get_locked() obtains a psp_dev reference via psp_dev_get_for_sock() (which uses psp_dev_tryget() under RCU); it then acquires psd-&gt;lock and drops the reference. Before the lock is taken, psp_dev_unregister() can run to completion: take psd-&gt;lock, clear out state, unlock, drop the registration reference.</p> <p>The expectation is that the lock prevents device unregistration, but much like with netdevs special care has to be taken when &#34;upgrading&#34; a reference to a locked device. Add the missing check if device is still alive. psp_dev_is_registered() exists already but had no callers, which makes me wonder if I either forgot to add this or lost the check during refactoring...</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: psp: check for device unregister when creating assoc</p> <p>psp_assoc_device_get_locked() obtains a psp_dev reference via psp_dev_get_for_sock() (which uses psp_dev_tryget() under RCU); it then acquires psd-&gt;lock and drops the reference. Before the lock is taken, psp_dev_unregister() can run to completion: take psd-&gt;lock, clear out state, unlock, drop the registration reference.</p> <p>The expectation is that the lock prevents device unregistration, but much like with netdevs special care has to be taken when &#34;upgrading&#34; a reference to a locked device. Add the missing check if device is still alive. psp_dev_is_registered() exists already but had no callers, which makes me wonder if I either forgot to add this or lost the check during refactoring...</p> https://db.gcve.eu/vuln/cve-2026-52979