In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() The original code relies on cancel_delayed_work() in otx2_ptp_destroy…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() The original code relies on cancel_delayed_work() in otx2_ptp_destroy(), which does not ensure that the delayed work item synctstamp_work has fully completed if it was already running. This leads to use-after-free scenarios where otx2_ptp is deallocated by otx2_ptp_destroy(), while synctstamp_work remains active and attempts to dereference otx2_ptp in otx2_sync_tstam…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/2786879aebf363806a13d41e8d5f99202ddd23d9 Patch
- https://git.kernel.org/stable/c/5ca20bb7b4bde72110c3ae78423cbfdd0157aa36 Patch
- https://git.kernel.org/stable/c/d2cfefa14ce8137b17f99683f968bebf134b6a48 Patch
- https://git.kernel.org/stable/c/f8b4687151021db61841af983f1cb7be6915d4ef Patch
- https://git.kernel.org/stable/c/ff27e23b311fed4d25e3852e27ba693416d4c7b3 Patch
Timeline
- nvd_ingest NVD