In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8712: fix use-after-free in rtl8712_dl_fw
Syzbot reported use-after-free in rtl8712_dl_fw(). The problem was in race condition between r871xu_dev_remove() ->ndo_open() callback.
It's easy to see from crash log, that driver accesses released firmware in ->ndo_open() callback. It may happen, since driver was releasing firmware _before_ unregistering netdev. Fix it by moving unregister_netdev() before cleaning up resources.
Call Trace: ... rtl871x_open_fw drivers/staging/rtl8712/hal_init.c:83 [inline] rtl8712_dl_fw+0xd95/0xe10 drivers/staging/rtl8712/hal_init.c:170 rtl8712_hal_init drivers/staging/rtl8712/hal_init.c:330 [inline] rtl871x_hal_init+0xae/0x180 drivers/staging/rtl8712/hal_init.c:394 netdev_open+0xe6/0x6c0 drivers/staging/rtl8712/os_intfs.c:380 __dev_open+0x2bc/0x4d0 net/core/dev.c:1484
Freed by task 1306: ... release_firmware+0x1b/0x30 drivers/base/firmware_loader/main.c:1053 r871xu_dev_remove+0xcc/0x2c0 drivers/staging/rtl8712/usb_intf.c:599 usb_unbind_interface+0x1d8/0x8d0 drivers/usb/core/driver.c:458
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade gfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade dtb-nvidiaUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-sourceUpgrade dtb-caviumUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rt | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub