In the Linux kernel, the following vulnerability has been resolved:
net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
In the ether3_probe function, a timer is initialized with a callback function ether3_ledoff, bound to &prev(dev)->timer. Once the timer is started, there is a risk of a race condition if the module or device is removed, triggering the ether3_remove function to perform cleanup. The sequence of operations that may lead to a UAF bug is as follows:
CPU0 CPU1
| ether3_ledoff ether3_remove | free_netdev(dev); | put_devic | kfree(dev); | | ether3_outw(priv(dev)->regs.config2 |= CFG2_CTRLO, REG_CONFIG2); | // use dev
Fix it by ensuring that the timer is canceled before proceeding with the cleanup in ether3_remove.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Dell Powerstore Dsa2025223 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 27, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-awsUpgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-intelUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gke-5.15Upgrade linux-image-oracleUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-oemUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-5.4.0-208-lowlatency | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub