Answer in brief
CVE-2026-68317 records a Unknown severity vulnerability in pds_core: fix auxiliary device add/del races. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=0861fccd43b8bafb533d97308862d20b7db3a2ad <646b58b543f3bb1641e9123b75ff7799fe7b42f1 || >=f41e27b746241e57d968d1d61c008322338ca258 <ef194751fed50cf3452017b63f00142a0ab40c70 || >=b699bdc720c0255d1bb76cecba7382c1f2107af5 <cf0ed2ba202f5c3b300ec1bf7ff0b5d555f7d518 || >=b699bdc720c0255d1bb76cecba7382c1f2107af5 <bdeab32a7a91acd295d52a2d4ab1cc3f2da5e454 || >=b699bdc720c0255d1bb76cecba7382c1f2107af5 <bfa33cd513c7ceb93c5a4c30e5662acd73c0a916 || fec5f7af1d5f64a38f9224cd27b274d1af55a7ed || >=6.6.90 <6.6.148 || >=6.12.28 <6.12.101 || >=6.14.6 <6.15 | 646b58b543f3bb1641e9123b75ff7799fe7b42f1, ef194751fed50cf3452017b63f00142a0ab40c70, cf0ed2ba202f5c3b300ec1bf7ff0b5d555f7d518, bdeab32a7a91acd295d52a2d4ab1cc3f2da5e454, bfa33cd513c7ceb93c5a4c30e5662acd73c0a916, 6.6.148, 6.12.101, 6.15 |
| Linux/Linuxgeneric | 6.15 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: pds_core: fix auxiliary device add/del races Two paths add or delete the same slot (pf->vfs[vf_id].padev): a VF's pdsc_reset_done() and the PF's devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly. add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer. Check and update the slot under config_lock in both paths.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-68317 records a Unknown severity vulnerability in pds_core: fix auxiliary device add/del races. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=0861fccd43b8bafb533d97308862d20b7db3a2ad <646b58b543f3bb1641e9123b75ff7799fe7b42f1 || >=f41e27b746241e57d968d1d61c008322338ca258 <ef194751fed50cf3452017b63f00142a0ab40c70 || >=b699bdc720c0255d1bb76cecba7382c1f2107af5 <cf0ed2ba202f5c3b300ec1bf7ff0b5d555f7d518 || >=b699bdc720c0255d1bb76cecba7382c1f2107af5 <bdeab32a7a91acd295d52a2d4ab1cc3f2da5e454 || >=b699bdc720c0255d1bb76cecba7382c1f2107af5 <bfa33cd513c7ceb93c5a4c30e5662acd73c0a916 || fec5f7af1d5f64a38f9224cd27b274d1af55a7ed || >=6.6.90 <6.6.148 || >=6.12.28 <6.12.101 || >=6.14.6 <6.15 | 646b58b543f3bb1641e9123b75ff7799fe7b42f1, ef194751fed50cf3452017b63f00142a0ab40c70, cf0ed2ba202f5c3b300ec1bf7ff0b5d555f7d518, bdeab32a7a91acd295d52a2d4ab1cc3f2da5e454, bfa33cd513c7ceb93c5a4c30e5662acd73c0a916, 6.6.148, 6.12.101, 6.15 |
| Linux/Linuxgeneric | 6.15 | Not reported |
Published upstream
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 10, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 10, 2026
In the Linux kernel, the following vulnerability has been resolved: pds_core: fix auxiliary device add/del races Two paths add or delete the same slot (pf->vfs[vf_id].padev): a VF's pdsc_reset_done() and the PF's devlink enable_vnet/disable_vnet handler. They serialize on config_lock, but neither guards the slot under it correctly. add() registers and stores a new auxiliary device without first checking the slot, so a second add of an already-populated slot leaks the first device. del() makes that check outside config_lock, so two concurrent dels can both pass it; the first clears the slot, and the second dereferences a NULL pointer. Check and update the slot under config_lock in both paths.
Quoted source text, attributed separately from HOL analysis.