SB2026050270 - Use-after-free in Linux kernel gpib include driver

Description

This security bulletin contains information about 1 vulnerability.

1) Use-after-free (CVE-ID: CVE-2026-31769)

CWE-ID: CWE-416 - Use After Free

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to use-after-free in gpib IO ioctl handlers when processing concurrent ioctl operations on the same descriptor. A local user can trigger IBRD, IBWRT, IBCMD, or IBWAIT while concurrently issuing IBCLOSEDEV to cause a denial of service.

The issue arises because the descriptor can become unprotected after the mutex is released, and multiple threads can operate on the same descriptor concurrently.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/28c75dd143ead62e0dfac564c79d251e21d5d74b
• https://git.kernel.org/stable/c/cae26eff1b56d78bed7873cf3e60a2b1bdd4da6c
• https://git.kernel.org/stable/c/d1857f8296dceb75d00ab857fc3c61bc00c7f5c6