In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() The original code relies on cancel_delayed_work() in otx2_ptp_destroy…
高危 CVSS 7.8
摘要
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() The original code relies on cancel_delayed_work() in otx2_ptp_destroy(), which does not ensure that the delayed work item synctstamp_work has fully completed if it was already running. This leads to use-after-free scenarios where otx2_ptp is deallocated by otx2_ptp_destroy(), while synctstamp_work remains active and attempts to dereference otx2_ptp in otx2_sync_tstam…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/2786879aebf363806a13d41e8d5f99202ddd23d9 Patch
- https://git.kernel.org/stable/c/5ca20bb7b4bde72110c3ae78423cbfdd0157aa36 Patch
- https://git.kernel.org/stable/c/d2cfefa14ce8137b17f99683f968bebf134b6a48 Patch
- https://git.kernel.org/stable/c/f8b4687151021db61841af983f1cb7be6915d4ef Patch
- https://git.kernel.org/stable/c/ff27e23b311fed4d25e3852e27ba693416d4c7b3 Patch
时间线
- nvd_ingest NVD