CVE-2026-53332— Slimbus qcom-ngd-ctrl 回调注册顺序漏洞
影响版本矩阵 10
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 917809e2280bb83994be8b642373fd941d40c407< fa3790c7ea98328ddc3f7d8bf40247556245a6fc | affected |
917809e2280bb83994be8b642373fd941d40c407< 24ec89123fc9d0d24ce719dcf7fd6c57e5b0d753 | affected | ||
917809e2280bb83994be8b642373fd941d40c407< 08564e15c47a5fb0af6643a43ee15521d49bcdea | affected | ||
917809e2280bb83994be8b642373fd941d40c407< 2a9d50e9ea406e0c8735938484adc20515ef1b47 | affected | ||
4.19 | affected | ||
< 4.19 | unaffected | ||
6.12.94≤ 6.12.* | unaffected | ||
6.18.36≤ 6.18.* | unaffected | ||
| … +2 条更多 | |||
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2026-53332 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd When the remoteproc starts in parallel with the NGD driver being probed, or the remoteproc is already up when the PDR lookup is being registered, or in the theoretical event that we get an interrupt from the hardware, these callbacks will operate on uninitialized data. This result in issues to boot the affected boards. One such example can be seen in the following fault, where qcom_slim_ngd_ssr_pdr_notify() schedules work on the NULL ngd_up_work. [ 21.858578] ------------[ cut here ]------------ [ 21.858745] WARNING: kernel/workqueue.c:2338 at __queue_work+0x5e0/0x790, CPU#2: kworker/2:2/116 ... [ 21.859251] Call trace: [ 21.859255] __queue_work+0x5e0/0x790 (P) [ 21.859265] queue_work_on+0x6c/0xf0 [ 21.859273] qcom_slim_ngd_ssr_pdr_notify+0x110/0x150 [slim_qcom_ngd_ctrl] [ 21.859304] qcom_slim_ngd_ssr_notify+0x24/0x40 [slim_qcom_ngd_ctrl] [ 21.859318] notifier_call_chain+0xa4/0x230 [ 21.859329] srcu_notifier_call_chain+0x64/0xb8 [ 21.859338] ssr_notify_start+0x40/0x78 [qcom_common] [ 21.859355] rproc_start+0x130/0x230 [ 21.859367] rproc_boot+0x3d4/0x518 ... Move the enablement of interrupts, and the registration of SSR and PDR until after the NGD device has been registered. This could be further refined by moving initialization to the control driver probe and by removing the platform driver model from the picture.
来源: 美国国家漏洞数据库 NVD
CVSS Information
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
N/A
来源: 美国国家漏洞数据库 NVD
受影响产品
二、漏洞 CVE-2026-53332 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-53332 的情报信息
请登录查看更多情报信息。
CVE-2026-53332 补丁与修复 (3)
同批安全公告 · Linux · 2026-07-01 · 共 31 条
| CVE-2026-53342 | ARM64 内存管理 热移除页表未调用析构函数漏洞 | |
| CVE-2026-53326 | Linux内核debugobjects早期启动硬中断上下文远程代码执行漏洞 | |
| CVE-2026-53327 | debugobjects 在 pi_blocked_on 时不填充 pool 的漏洞 | |
| CVE-2026-53328 | sched_ext: scx_cgroup_move_task NULL cgrp_moving_from警告漏洞 | |
| CVE-2026-53329 | AMD Display krealloc_array 函数越界写入漏洞 | |
| CVE-2026-53330 | AMD Display 驱动 dp_get_eq_aux_rd_interval 越界读取漏洞 | |
| CVE-2026-53331 | Slimbus qcom-ngd-ctrl tx_lock/ctrl->锁ABBA死锁漏洞 | |
| CVE-2026-53334 | mm/damon/reclaim 上下文分配失败处理 | |
| CVE-2026-53333 | mm/mincore: 处理非交换条目前添加!CONFIG_SWAP守卫 | |
| CVE-2026-53335 | Linux DAMON LRU排序上下文分配失败处理漏洞 | |
| CVE-2026-53336 | nvmem: onie-tlv 布局未知类型导致挂起漏洞 | |
| CVE-2026-53337 | Linux 内核 bond_do_ioctl() NULL指针解引用漏洞 | |
| CVE-2026-53338 | Airoha 网卡驱动 NULL 指针解引用漏洞 | |
| CVE-2026-53340 | i2c: imx修复运行时电源管理中的时钟和pinctrl状态不一致漏洞 | |
| CVE-2026-53339 | i2c: qcom-cci NULL指针解引用漏洞 | |
| CVE-2026-53356 | Intel i915 DRM物理缓冲区偏移预读/预写漏洞 | |
| CVE-2026-53341 | Linux fhandle UAF漏洞：may_decode_fh()未锁定读取mnt_ns | |
| CVE-2026-53343 | ARM KASAN VMAP栈影子内存字节加载漏洞 | |
| CVE-2026-53344 | mcp23s08 引脚控制器初始化缺陷 | |
| CVE-2026-53345 | KVM虚拟机销毁时内存脏页警告问题 |
显示前 20 条，共 31 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-53332
暂无评论