CVE-2026-43340
Published: May 8, 2026
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: comedi: Reinit dev->spinlock between attachments to low-level drivers `struct comedi_device` is the main controlling structure for a COMEDI device created by the COMEDI subsystem. It contains a member `spinlock` containing a spin-lock that is initialized by the COMEDI subsystem, but is reserved for use by a low-level driver attached to the COMEDI device (at least since commit 25436dc9d84f ("Staging: comedi: remove RT code")). Some COMEDI devices (those created on initialization of the COMEDI subsystem when the "comedi.comedi_num_legacy_minors" parameter is non-zero) can be attached to different low-level drivers over their lifetime using the `COMEDI_DEVCONFIG` ioctl command. This can result in inconsistent lock states being reported when there is a mismatch in the spin-lock locking levels used by each low-level driver to which the COMEDI device has been attached. Fix it by reinitializing `dev->spinlock` before calling the low-level driver's `attach` function pointer if `CONFIG_LOCKDEP` is enabled.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected ed9eccbe8970f6eedc1b978c157caf1251a896d4 - < 3181c34b415c5464be9d34bff3e43ef63b747039affected ed9eccbe8970f6eedc1b978c157caf1251a896d4 - < 2b1f49e4fdff3ef0f8e9158bbb5b149e06287560affected ed9eccbe8970f6eedc1b978c157caf1251a896d4 - < 4d5ffe524903a30e2e0da7d16841a56bec2de55caffected ed9eccbe8970f6eedc1b978c157caf1251a896d4 - < c01bcc67a9a692d65508ebd480405b5e77d562b7affected ed9eccbe8970f6eedc1b978c157caf1251a896d4 - < 430291d8f3884f57ae0057049b0ca291453e29e1+3 more versions |
Linux | Linux | affected 2.6.29unaffected 0 - < 2.6.29unaffected 5.10.253 - <= 5.10.*unaffected 5.15.203 - <= 5.15.*unaffected 6.1.168 - <= 6.1.*+5 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now