In the Linux kernel, the following vulnerability has been resolved:
net: ena: PHC: Fix potential use-after-free in get_timestamp
Move the phc->active check and resp pointer assignment to after acquiring the spinlock. Previously, phc->active was checked without holding the lock, and resp was cached from ena_dev->phc.virt_addr before the lock was acquired.
If ena_com_phc_destroy() runs between the lockless active check and the lock acquisition, it sets active=false, releases the lock, frees the DMA memory, and sets virt_addr=NULL. The get_timestamp path would then read a NULL virt_addr and dereference it.
With both the active check and the pointer read under the lock, destroy cannot free the memory while get_timestamp is using it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 17, 2026 | Jun 24, 2026 |
| Rocky_linux | — | Upgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade rtlaUpgrade libperfUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extra | Sep 23, 2026 | Sep 19, 2026 |
| Ubuntu | — | Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-7.0.0-1014-azureUpgrade linux-image-gke-64kUpgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-aws-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-raspi-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-nvidia-7.0Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-aws-64k-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-gcp-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-awsUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-oem-24.04cUpgrade linux-image-gke-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oracleUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-realtime-64kUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-azureUpgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-26.04Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-oracle-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-aws-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-bosUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-oem-24.04dUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-genericUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-realtime-64k-hwe-26.04 | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub