In the Linux kernel, the following vulnerability has been resolved:
ixgbe: fix too early devlink_free() in ixgbe_remove()
Since ixgbe_adapter is embedded in devlink, calling devlink_free() prematurely in the ixgbe_remove() path can lead to UAF. Move devlink_free() to the end.
KASAN report:
BUG: KASAN: use-after-free in ixgbe_reset_interrupt_capability+0x140/0x180 [ixgbe] Read of size 8 at addr ffff0000adf813e0 by task bash/2095 CPU: 1 UID: 0 PID: 2095 Comm: bash Tainted: G S 6.17.0-rc2-tnguy.net-queue+ #1 PREEMPT(full) [...] Call trace: show_stack+0x30/0x90 (C) dump_stack_lvl+0x9c/0xd0 print_address_description.constprop.0+0x90/0x310 print_report+0x104/0x1f0 kasan_report+0x88/0x180 __asan_report_load8_noabort+0x20/0x30 ixgbe_reset_interrupt_capability+0x140/0x180 [ixgbe] ixgbe_clear_interrupt_scheme+0xf8/0x130 [ixgbe] ixgbe_remove+0x2d0/0x8c0 [ixgbe] pci_device_remove+0xa0/0x220 device_remove+0xb8/0x170 device_release_driver_internal+0x318/0x490 device_driver_detach+0x40/0x68 unbind_store+0xec/0x118 drv_attr_store+0x64/0xb8 sysfs_kf_write+0xcc/0x138 kernfs_fop_write_iter+0x294/0x440 new_sync_write+0x1fc/0x588 vfs_write+0x480/0x6a0 ksys_write+0xf0/0x1e0 __arm64_sys_write+0x70/0xc0 invoke_syscall.constprop.0+0xcc/0x280 el0_svc_common.constprop.0+0xa8/0x248 do_el0_svc+0x44/0x68 el0_svc+0x54/0x160 el0t_64_sync_handler+0xa0/0xe8 el0t_64_sync+0x1b0/0x1b8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 30, 2025 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-64kbUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-default-base | Dec 5, 2025 | Nov 11, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-6.17Upgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-generic-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-aws-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-genericUpgrade linux-image-realtime-6.17Upgrade linux-image-virtualUpgrade linux-image-aws-64kUpgrade linux-image-raspi-6.17Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-generic-64k-6.17Upgrade linux-image-6.17.0-14-genericUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-awsUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-oracleUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-realtimeUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-oem-6.17Upgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-gcp-6.17 | Feb 13, 2026 | Feb 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub