In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). syzkaller reported a use-after-free in geneve_find_dev() [0] without repro. gen…
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev(). syzkaller reported a use-after-free in geneve_find_dev() [0] without repro. geneve_configure() links struct geneve_dev.next to net_generic(net, geneve_net_id)->geneve_list. The net here could differ from dev_net(dev) if IFLA_NET_NS_PID, IFLA_NET_NS_FD, or IFLA_TARGET_NETNSID is set. When dev_net(dev) is dismantled, geneve_exit_batch_rtnl() finally calls unregister_netdevice_…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/3ce92ca990cfac88a87c61df3cc0b5880e688ecf Patch
- https://git.kernel.org/stable/c/5a0538ac6826807d6919f6aecbb8996c2865af2c Patch
- https://git.kernel.org/stable/c/788dbca056a8783ec063da3c9d49a3a71c76c283 Patch
- https://git.kernel.org/stable/c/904e746b2e7fa952ab8801b303ce826a63153d78 Patch
- https://git.kernel.org/stable/c/9593172d93b9f91c362baec4643003dc29802929 Patch
- https://git.kernel.org/stable/c/d5e86e27de0936f3cb0a299ce519d993e9cf3886 Patch
- https://git.kernel.org/stable/c/da9b0ae47f084014b1e4b3f31f70a0defd047ff3 Patch
- https://git.kernel.org/stable/c/f74f6560146714241c6e167b03165ee77a86e316 Patch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html
Timeline
- nvd_ingest NVD