CVE-2026-72306

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-72306
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72306.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72306
Downstream
Published
2026-08-15T05:55:23Z
Modified
2026-08-18T03:30:59Z
Summary
vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
Details

In the Linux kernel, the following vulnerability has been resolved:

vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter

There is one race case in vduse_dev_msg_sync and vduse_dev_read_iter:

vduse_dev_read_iter(): lock(msg_lock); dequeue_msg(send_list); unlock(msg_lock); vduse_dev_msg_sync(): wait_timeout() finish lock(msg_lock); check msg->complete is false list_del(msg); <- double list_del() crash!

To fix this case, we shall ensure vduse_msg is on send_list or recv_list outside the msg_lock critical section.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72306.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c8a6153b6c59d95c0e091f053f6f180952ade91e
Fixed
c83ad3dfa6d9953d5ce6839416bf5a1bfc50285a
Fixed
09723f26ed801c083e914cec4cc0e1af4b933dc7
Fixed
d7e7c813834c6c05c26033456ab7169e2f9c99eb
Fixed
3755965adbb617f4283ac6ccd351ed0676843cba
Fixed
d8715b5a8fdb23fef576700e71d0c253dbeddad4
Fixed
8062ff9d366c4bc4ae775e14eac9a769f20c60dd
Fixed
ae9c13b6fd79087cc5a216ee1649b6f012c2a238

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72306.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.15.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72306.json"