In the Linux kernel, the following vulnerability has been resolved:
comedi: dt2815: add hardware detection to prevent crash
The dt2815 driver crashes when attached to I/O ports without actual
hardware present. This occurs because syzkaller or users can attach
the driver to arbitrary I/O addresses via COMEDI_DEVCONFIG ioctl.
When no hardware exists at the specified port, inb() operations return
0xff (floating bus), but outb() operations can trigger page faults due
to undefined behavior, especially under race conditions:
BUG: unable to handle page fault for address: 000000007fffff90
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
RIP: 0010:dt2815_attach+0x6e0/0x1110
Add hardware detection by reading the status register before attempting
any write operations. If the read returns 0xff, assume no hardware is
present and fail the attach with -ENODEV. This prevents crashes from
outb() operations on non-existent hardware.
References
Configurations
Configuration 1 (hide)
|
History
07 May 2026, 19:11
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |
|
| First Time |
Linux linux Kernel
Linux |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.7 |
| References | () https://git.kernel.org/stable/c/0dcf33994b8dcf3db36530fb7e2cf9f89e5cbac3 - Patch | |
| References | () https://git.kernel.org/stable/c/34b13250c618d7441508c6ef369144aa8a9b9bfa - Patch | |
| References | () https://git.kernel.org/stable/c/34c8b3a91bdfbe4573650b4cd750ef639101fdc5 - Patch | |
| References | () https://git.kernel.org/stable/c/65c528fbeddd88478c210052f6c7b21be4973156 - Patch | |
| References | () https://git.kernel.org/stable/c/8d63161837f1bf8810dbcd2a583c2bbf5ca6d733 - Patch | |
| References | () https://git.kernel.org/stable/c/93853512f565e625df2397f0d8050d6aafd7c3ad - Patch | |
| References | () https://git.kernel.org/stable/c/d2a786efdb9971f2a647724625da5bbecc994dc9 - Patch | |
| References | () https://git.kernel.org/stable/c/d5d9df8b08d68d083ac57abc2c887dfb1f31af63 - Patch | |
| CWE | CWE-362 |
01 May 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-01 15:16
Updated : 2026-05-07 19:11
NVD link : CVE-2026-31751
Mitre link : CVE-2026-31751
CVE.ORG link : CVE-2026-31751
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')