CVE-2026-64162 in Linux
Resumen
por VulDB • 2026-07-20
En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad:
idpf: corregir la inicialización del spinlock read_dev_clk_lock en idpf_ptp_init()
En idpf_ptp_init(), read_dev_clk_lock se inicializa después de que ya se haya llamado a ptp_schedule_worker() (y después de que idpf_ptp_settime64() pudiera alcanzar el lock). El worker auxiliar PTP se dispara inmediatamente al programarse y puede llamar a idpf_ptp_read_src_clk_reg_direct(), lo cual toma spin_lock(&ptp->read_dev_clk_lock) sobre un lock no inicializado, desencadenando la advertencia de lockdep "non-static key":
[12973.796587] idpf 0000:83:00.0: Device HW Reset initiated
[12974.094507] INFO: trying to register non-static key.
... [12974.097208] Call Trace:
[12974.097213] <TASK>
[12974.097218] dump_stack_lvl+0x93/0xe0
[12974.097234] register_lock_class+0x4c4/0x4e0
[12974.097249] ? __lock_acquire+0x427/0x2290
[12974.097259] __lock_acquire+0x98/0x2290
[12974.097272] lock_acquire+0xc6/0x310
[12974.097281] ? idpf_ptp_read_src_clk_reg+0xb7/0x150 [idpf]
[12974.097311] ? lockdep_hardirqs_on_prepare+0xde/0x190
[12974.097318] ? finish_task_switch.isra.0+0xd2/0x350
[12974.097330] ? __pfx_ptp_aux_kworker+0x10/0x10 [ptp]
[12974.097343] _raw_spin_lock+0x30/0x40
[12974.097353] ? idpf_ptp_read_src_clk_reg+0xb7/0x150 [idpf]
[1297
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.