{"id":"CVE-2026-98973","published":"2026-10-23T13:17:18.900","lastModified":"2026-10-23T13:17:18.900","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/bridge: Fix unlocked list_del in drm_bridge_add()\n\nWhen re-adding a bridge that was previously removed, drm_bridge_add()\ndrops it from bridge_lingering_list without holding bridge_lock.\n\nBoth bridge_list and bridge_lingering_list are protected by bridge_lock,\nas they are concurrently modified by drm_bridge_remove() and\n__drm_bridge_free(), and walked by the debugfs 'bridges' file.  Running\nthe list_empty() test and the list_del_init() outside of the lock may\ntherefore corrupt either list.\n\nPerform both under bridge_lock.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/b62e3db8cdc1680e1c3390591e872f485148541a","tags":[]},{"url":"https://git.kernel.org/stable/c/f469d850854101eae60dd4080244f114a9bcf2b5","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}