https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 08:31:31 +0000 https://vulnerability.circl.lu/vuln/cve-2026-23230 <p><strong>Affected:</strong> Linux, Siemens RUGGEDCOM RST2428P</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>smb: client: split cached_fid bitfields to avoid shared-byte RMW races</p> <p>is_open, has_lease and on_list are stored in the same bitfield byte in struct cached_fid but are updated in different code paths that may run concurrently. Bitfield assignments generate byte read–modify–write operations (e.g. `orb $mask, addr` on x86_64), so updating one flag can restore stale values of the others.</p> <p>A possible interleaving is: CPU1: load old byte (has_lease=1, on_list=1) CPU2: clear both flags (store 0) CPU1: RMW store (old | IS_OPEN) -&gt; reintroduces cleared bits</p> <p>To avoid this class of races, convert these flags to separate bool fields.</p> <p><strong>Affected:</strong> Linux, Siemens RUGGEDCOM RST2428P</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>smb: client: split cached_fid bitfields to avoid shared-byte RMW races</p> <p>is_open, has_lease and on_list are stored in the same bitfield byte in struct cached_fid but are updated in different code paths that may run concurrently. Bitfield assignments generate byte read–modify–write operations (e.g. `orb $mask, addr` on x86_64), so updating one flag can restore stale values of the others.</p> <p>A possible interleaving is: CPU1: load old byte (has_lease=1, on_list=1) CPU2: clear both flags (store 0) CPU1: RMW store (old | IS_OPEN) -&gt; reintroduces cleared bits</p> <p>To avoid this class of races, convert these flags to separate bool fields.</p> https://vulnerability.circl.lu/vuln/cve-2026-23230