In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Kill URBs before clearing tx status queue In rtl8187_stop() move the call of usb_kill_anchored_urbs() before clear…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Kill URBs before clearing tx status queue In rtl8187_stop() move the call of usb_kill_anchored_urbs() before clearing b_tx_status.queue. This change prevents callbacks from using already freed skb due to anchor was not killed before freeing such skb. BUG: kernel NULL pointer dereference, address: 0000000000000080 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/14ca6952691fa8cc91e7644512e6ff24a595283f Patch
- https://git.kernel.org/stable/c/16d8fd74dbfca0ea58645cd2fca13be10cae3cdd Patch
- https://git.kernel.org/stable/c/7858a95566f4ebf59524666683d2dcdba3fca968 Patch
- https://git.kernel.org/stable/c/789415771422f4fb9f444044f86ecfaec55df1bd Patch
- https://git.kernel.org/stable/c/81cfe34d0630de4e23ae804dcc08fb6f861dc37d Patch
- https://git.kernel.org/stable/c/8c767727f331fb9455b0f81daad832b5925688cb Patch
- https://git.kernel.org/stable/c/c51a45ad9070a6d296174fcbe5c466352836c12b Patch
- https://git.kernel.org/stable/c/c73c773b09e313278f9b960303a2809b8440bac6 Patch
- https://git.kernel.org/stable/c/e64732ebff9e24258e7326f07adbe2f2b990daf8 Patch
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Third Party Advisory
Timeline
- nvd_ingest NVD