Description
In the Linux kernel, the following vulnerability has been resolved:
vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
There is one race case in vduse_dev_msg_sync and vduse_dev_read_iter:
vduse_dev_read_iter():
lock(msg_lock);
dequeue_msg(send_list);
unlock(msg_lock);
vduse_dev_msg_sync():
wait_timeout() finish
lock(msg_lock);
check msg->complete is false
list_del(msg); <- double list_del() crash!
To fix this case, we shall ensure vduse_msg is on send_list or recv_list
outside the msg_lock critical section.
vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
There is one race case in vduse_dev_msg_sync and vduse_dev_read_iter:
vduse_dev_read_iter():
lock(msg_lock);
dequeue_msg(send_list);
unlock(msg_lock);
vduse_dev_msg_sync():
wait_timeout() finish
lock(msg_lock);
check msg->complete is false
list_del(msg); <- double list_del() crash!
To fix this case, we shall ensure vduse_msg is on send_list or recv_list
outside the msg_lock critical section.
Published:
2026-08-15
Score:
n/a
EPSS:
< 1% Very Low
KEV:
No
Impact:
n/a
Action:
n/a
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Linux | Linux | unaffected |
|
||||||||||||||||||||||||||||||
| Linux | Linux | affected |
|
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Linux | Linux Kernel | 99% |
|
||||||||||||||||||||||||||||||||||||||||
| Linux | Linux Kernel | 99% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 Ubuntu USN |
USN-8876-1 | Linux kernel (Azure CVM) vulnerabilities |
| Ubuntu USN |
USN-8875-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-8877-1 | Linux kernel (GCP) vulnerabilities |
| Ubuntu USN |
USN-8878-1 | Linux kernel (GCP) vulnerabilities |
| Ubuntu USN |
USN-8879-1 | Linux kernel (Oracle) vulnerabilities |
| Ubuntu USN |
USN-8887-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-8888-1 | Linux kernel (Azure) vulnerabilities |
| Ubuntu USN |
USN-8889-1 | Linux kernel (OEM) vulnerabilities |
| Ubuntu USN |
USN-8887-2 | Linux kernel (AWS) vulnerabilities |
| Ubuntu USN |
USN-8888-2 | Linux kernel (Azure) vulnerabilities |
| Ubuntu USN |
USN-8875-2 | Linux kernel (NVIDIA) vulnerabilities |
| Ubuntu USN |
USN-8887-3 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-8917-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-8918-1 | Linux kernel (Azure) vulnerabilities |
| Ubuntu USN |
USN-9003-1 | Linux kernel (NVIDIA) vulnerabilities |
References
History
Sat, 07 Nov 2026 07:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Sat, 15 Aug 2026 19:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-362 |
Sat, 15 Aug 2026 06:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In the Linux kernel, the following vulnerability has been resolved: vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter There is one race case in vduse_dev_msg_sync and vduse_dev_read_iter: vduse_dev_read_iter(): lock(msg_lock); dequeue_msg(send_list); unlock(msg_lock); vduse_dev_msg_sync(): wait_timeout() finish lock(msg_lock); check msg->complete is false list_del(msg); <- double list_del() crash! To fix this case, we shall ensure vduse_msg is on send_list or recv_list outside the msg_lock critical section. | |
| Title | vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter | |
| First Time appeared |
Linux
Linux linux Kernel |
|
| CPEs | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Linux
Linux linux Kernel |
|
| References |
|
|
MITRE
Status: PUBLISHED
Assigner: Linux
Published:
Updated: 2026-11-06T16:55:25.658Z
Reserved: 2026-08-09T03:40:39.918Z
Link: CVE-2026-72306
Vulnrichment
Updated: 2026-11-06T16:54:29.636Z
NVD
Status : Received
Published: 2026-08-15T06:22:03.330
Modified: 2026-11-06T17:19:42.787
Link: CVE-2026-72306
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-08-15T21:00:04Z
Weaknesses