CVE Database
/

CVE-2026-43340

Back to search

CVE-2026-43340

Published: May 8, 2026

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: comedi: Reinit dev->spinlock between attachments to low-level drivers `struct comedi_device` is the main controlling structure for a COMEDI device created by the COMEDI subsystem. It contains a member `spinlock` containing a spin-lock that is initialized by the COMEDI subsystem, but is reserved for use by a low-level driver attached to the COMEDI device (at least since commit 25436dc9d84f ("Staging: comedi: remove RT code")). Some COMEDI devices (those created on initialization of the COMEDI subsystem when the "comedi.comedi_num_legacy_minors" parameter is non-zero) can be attached to different low-level drivers over their lifetime using the `COMEDI_DEVCONFIG` ioctl command. This can result in inconsistent lock states being reported when there is a mismatch in the spin-lock locking levels used by each low-level driver to which the COMEDI device has been attached. Fix it by reinitializing `dev->spinlock` before calling the low-level driver's `attach` function pointer if `CONFIG_LOCKDEP` is enabled.

VendorProductVersions

Linux

Linux

affected
ed9eccbe8970f6eedc1b978c157caf1251a896d4 - < 3181c34b415c5464be9d34bff3e43ef63b747039
affected
ed9eccbe8970f6eedc1b978c157caf1251a896d4 - < 2b1f49e4fdff3ef0f8e9158bbb5b149e06287560
affected
ed9eccbe8970f6eedc1b978c157caf1251a896d4 - < 4d5ffe524903a30e2e0da7d16841a56bec2de55c
affected
ed9eccbe8970f6eedc1b978c157caf1251a896d4 - < c01bcc67a9a692d65508ebd480405b5e77d562b7
affected
ed9eccbe8970f6eedc1b978c157caf1251a896d4 - < 430291d8f3884f57ae0057049b0ca291453e29e1

+3 more versions

Linux

Linux

affected
2.6.29
unaffected
0 - < 2.6.29
unaffected
5.10.253 - <= 5.10.*
unaffected
5.15.203 - <= 5.15.*
unaffected
6.1.168 - <= 6.1.*

+5 more versions

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now