In the Linux kernel, the following vulnerability has been resolved:
staging: rtl8712: fix use-after-free in rtl8712_dl_fw
Syzbot reported use-after-free in rtl8712_dl_fw(). The problem was in race condition between r871xu_dev_remove() ->ndo_open() callback.
It's easy to see from crash log, that driver accesses released firmware in ->ndo_open() callback. It may happen, since driver was releasing firmware _before_ unregistering netdev. Fix it by moving unregister_netdev() before cleaning up resources.
Call Trace: ... rtl871x_open_fw drivers/staging/rtl8712/hal_init.c:83 [inline] rtl8712_dl_fw+0xd95/0xe10 drivers/staging/rtl8712/hal_init.c:170 rtl8712_hal_init drivers/staging/rtl8712/hal_init.c:330 [inline] rtl871x_hal_init+0xae/0x180 drivers/staging/rtl8712/hal_init.c:394 netdev_open+0xe6/0x6c0 drivers/staging/rtl8712/os_intfs.c:380 __dev_open+0x2bc/0x4d0 net/core/dev.c:1484
Freed by task 1306: ... release_firmware+0x1b/0x30 drivers/base/firmware_loader/main.c:1053 r871xu_dev_remove+0xcc/0x2c0 drivers/staging/rtl8712/usb_intf.c:599 usb_unbind_interface+0x1d8/0x8d0 drivers/usb/core/driver.c:458
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-apmUpgrade kernel-devel-rtUpgrade dtb-armUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-kvmsmallUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade dtb-socionextUpgrade kernel-default-develUpgrade dtb-amdUpgrade kernel-azure-develUpgrade kernel-azureUpgrade dtb-broadcomUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-source-vanilla | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub