CVE-2026-68317 pds_core: fix auxiliary device add/del races
A race condition in the pds_core driver allows concurrent operations to cause a NULL pointer dereference, leading to a system crash.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-68317?
CVE-2026-68317 is a vulnerability in Linux, published on 10 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
pds_core: fix auxiliary device add/del races
Two paths add or delete the same slot (pf->vfs[vf_id].padev): a VF's pdsc_reset_done() and the PF's devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly.
add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer.
Check and update the slot under config_lock in both paths.
Which versions are affected by CVE-2026-68317?
How do I fix CVE-2026-68317?
Apply the vendor's patch.
Is CVE-2026-68317 being exploited?
There is no known exploitation of CVE-2026-68317 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-68317, DEBIAN-CVE-2026-68317, GHSA-gg5r-cw5w-f3jw, UBUNTU-CVE-2026-68317.