Threats Tagged 'cve-2026-63977'

A race condition vulnerability in the Linux kernel's DPLL zl3073x driver was resolved by replacing a deferred work mechanism with a direct notification function, eliminating the risk of dereferencing freed or NULL pointers during device teardown. This flaw could cause kernel crashes or potentially be exploited for privilege escalation. The vulnerability affects numerous specific Linux kernel versions prior to 7.0.0-28.28.1 and related builds. A patch is available and should be applied via standard system updates. The update requires a system reboot and recompilation of third-party kernel modules due to an ABI change.

In the Linux kernel, the following vulnerability has been resolved: dpll: zl3073x: use __dpll_device_change_ntf() and remove change_work The change_work was introduced to send device change notifications from DPLL device callbacks without deadlocking on dpll_lock, since the callbacks are already invoked under that lock. Now that __dpll_device_change_ntf() is exported for callers that already hold dpll_lock, use it directly and remove the change_work infrastructure entirely. This eliminates a race condition where change_work could be re-scheduled after cancel_work_sync() during device teardown, potentially causing the handler to dereference a freed or NULL dpll_dev pointer.