{"schema":"threatline.record/2","record":{"id":"CVE-2026-97956","aliases":[],"summary":"net: net_failover: Fix the deadlock in net_failover_slave_name_change()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: net_failover: Fix the deadlock in net_failover_slave_name_change()\n\nThis is a sibling fix of commit\nb84c5632c7b3 (\"net: net_failover: Fix the deadlock in slave register\").\nThere is netdev_lock_ops() in the upper callers, so using netif_open()\ninstead of dev_open().\n\nCall Trace:\n __schedule+0x2bb/0x650\n schedule+0x27/0xb0\n schedule_preempt_disabled+0x15/0x30\n __mutex_lock.constprop.0+0x550/0xaf0\n __mutex_lock_slowpath+0x13/0x20\n mutex_lock+0x3b/0x50\n dev_open+0x3b/0xe0\n net_failover_slave_name_change+0x22/0x40\n failover_event+0xd4/0x1e0\n notifier_call_chain+0x62/0xf0\n raw_notifier_call_chain+0x16/0x30\n call_netdevice_notifiers_info+0x50/0x80\n netif_change_name+0x200/0x330\n do_setlink.isra.0+0xb12/0xdf0\n ? security_capable+0x9a/0x1e0\n ? ns_capable+0x31/0x60\n rtnl_setlink+0x302/0x670\n ? netlink_recvmsg+0x296/0x340\n ? security_capable+0x9a/0x1e0\n ? __pfx_rtnl_setlink+0x10/0x10\n rtnetlink_rcv_msg+0x384/0x460\n ? __pfx_rtnetlink_rcv_msg+0x10/0x10\n netlink_rcv_skb+0x61/0x120\n rtnetlink_rcv+0x15/0x30\n netlink_unicast+0x28f/0x3c0\n netlink_sendmsg+0x216/0x450\n __sys_sendto+0x222/0x230\n __x64_sys_sendto+0x24/0x40\n x64_sys_call+0x1d5d/0x2390\n do_syscall_64+0x105/0x5a0\n ? do_syscall_64+0x140/0x5a0\n ? exc_page_fault+0x94/0x1e0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97956","source_modified_at":"2026-10-19T09:11:22.384Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"7e4d784f5810bba76c4593791028e13cce4af547","lessThan":"4b20e66d2e52d3628db4dccc1a33f134e73375d5","status":"affected","versionType":"git"},{"version":"7e4d784f5810bba76c4593791028e13cce4af547","lessThan":"c49bfa2c5dbd89f7683c26fc08b11e7369ea11e5","status":"affected","versionType":"git"},{"version":"7e4d784f5810bba76c4593791028e13cce4af547","lessThan":"985a663bf00799c1daf1c5789efa6406958780c8","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97956","source_modified_at":"2026-10-19T09:11:22.384Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"6.15","status":"affected"},{"version":"0","lessThan":"6.15","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.7","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97956","source_modified_at":"2026-10-19T09:11:22.384Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"4b20e66d2e52d3628db4dccc1a33f134e73375d5","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97956","source_modified_at":"2026-10-19T09:11:22.384Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"985a663bf00799c1daf1c5789efa6406958780c8","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.00166,"percentile":0.05526,"score_date":"2026-10-23"},"published_at":"2026-09-25T10:23:02.560Z","modified_at":"2026-10-19T09:11:22.384Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-97956","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:11:22.384Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-97956","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/4b20e66d2e52d3628db4dccc1a33f134e73375d5"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/c49bfa2c5dbd89f7683c26fc08b11e7369ea11e5"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/985a663bf00799c1daf1c5789efa6406958780c8"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:11:22.384Z","content_hash":"24af214b81df98dfaa28794135cb6eb78ba19d0b8f6da8721cbbbdeae682f497"}}
