CVE-2026-98388— exec: do_close_on_exec() before taking exec_update_lock
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
In the Linux kernel, the following vulnerability has been resolved: exec: do_close_on_exec() before taking exec_update_lock do_close_on_exec() currently happens while holding the exec_update_lock, which is used in a lot of places that access process state to s
影响版本矩阵 26
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | ae1e630bcaac739f625822078edbaea98366930d< 955973fff4a36d39a848b00cac1706863f568fe1 |
affected |
d54f14655fd7d7b293698a8b6918563c4c0465e7< 550feab5b01000ab314868b62211fb3ddfd600e8 |
affected | ||
bb43679356f1f2a4c6b1c88aec4f021e5b5c74e9< 5aacc19ba2b1faf84c4a2f2cf9a1784e03d1ff38 |
affected | ||
7456ae990a9738962b33146916fabca62ae3d4e0< 3feb4020bfb7ccf0d347f27051639d25e19cd65d |
affected | ||
4bfe8c481846cee52473a2f7d7b30ee8e6749fc4< 0d86cd6b709c39216e6ee5ea8f0fc4242bbb2b53 |
affected | ||
f9b4b03ccc9c69bf7f7298d4559906ebea7143b3< 19ddef61ee0a49782a60f8f497e50597ad5de2da |
affected | ||
6650527444dadc63d84aa939d14ecba4fadb2f69< 63be3d8511bdafa095cd14a393cbf3c58dbbb928 |
affected | ||
6650527444dadc63d84aa939d14ecba4fadb2f69< e780259b54e618ceb4763fbc21314acf3565e813 |
affected | ||
| … +18 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-98388 基础信息
漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
exec: do_close_on_exec() before taking exec_update_lock
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
exec: do_close_on_exec() before taking exec_update_lock
do_close_on_exec() currently happens while holding the exec_update_lock,
which is used in a lot of places that access process state to
synchronize access checks.
I recently added another such use of exec_update_lock, causing a
regression.
do_close_on_exec() can block waiting for a reply from a filesystem.
That means a hung filesystem can block codepaths that use
exec_update_lock; and it also means that a FUSE filesystem which
attempts to inspect the calling process can deadlock.
To avoid such problems, move do_close_on_exec() before the
exec_update_lock is taken, but after the FD table has been copied if
necessary.
I have looked through all the calls between the old and new position of
the do_close_on_exec() call; there seems to be no file descriptor table
access in between.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
受影响产品
二、漏洞 CVE-2026-98388 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-98388 的情报信息
请登录查看更多情报信息。
CVE-2026-98388 其他参考 (8)
同批安全公告 · Linux · 2026-10-14 · 共 46 条
| CVE-2026-98399 | s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block | |
| CVE-2026-98395 | powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit | |
| CVE-2026-98394 | af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. | |
| CVE-2026-98390 | x86/amd_node: Avoid divide by zero on virtualized systems | |
| CVE-2026-98391 | drm/xe: Guard page-fault worker with runtime PM check | |
| CVE-2026-98389 | drm/amdgpu: skip gfx switch_power_profile during GPU reset | |
| CVE-2026-98387 | s390/crypto: Fix skcipher_walk return code handling in aes_s390 | |
| CVE-2026-98386 | scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot | |
| CVE-2026-98392 | Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one | |
| CVE-2026-98398 | locking/lockdep: Invalidate stale class_cache entries for zapped classes | |
| CVE-2026-98397 | platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown | |
| CVE-2026-98400 | s390/ipl: Fix NULL deref in kdump without re-IPL parm block | |
| CVE-2026-98402 | net: icmp: avoid invalid transport header access in icmp_send tracepoint | |
| CVE-2026-98401 | net: iptunnel: fix stale transport header during tunnel decapsulation | |
| CVE-2026-98403 | s390/boot: Avoid IPL parameter append past command line | |
| CVE-2026-98404 | drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() | |
| CVE-2026-98405 | smb: client: fix missing iov bounds check in parse_posix_sids() | |
| CVE-2026-98406 | wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver | |
| CVE-2026-98408 | watchdog: rzv2h: Avoid division by zero | |
| CVE-2026-98407 | wifi: rsi: fix heap OOB write on key removal |
显示前 20 条，共 46 条。 查看全部 → →
IV. Related Vulnerabilities
Same product: Linux
-
CVE-2026-98431
RDMA/uverbs: Fix mmap_lock/disassociation_lock circular depe -
CVE-2026-98430
RDMA/efa: Keep admin queues alive while IRQ is registered -
CVE-2026-98429
RDMA/efa: Keep EQ resources alive while IRQ is registered -
CVE-2026-98427
net/sched: codel: bound the dropping loop per dequeue call -
CVE-2026-98428
ALSA: usb: 6fire: Avoid embedded URBs
Same vendor: Linux
-
CVE-2026-98431
RDMA/uverbs: Fix mmap_lock/disassociation_lock circular depe -
CVE-2026-98430
RDMA/efa: Keep admin queues alive while IRQ is registered -
CVE-2026-98429
RDMA/efa: Keep EQ resources alive while IRQ is registered -
CVE-2026-98427
net/sched: codel: bound the dropping loop per dequeue call -
CVE-2026-98428
ALSA: usb: 6fire: Avoid embedded URBs
V. Comments for CVE-2026-98388
暂无评论