7.8

CVE-2026-53157

net: phonet: free phonet_device after RCU grace period

In the Linux kernel, the following vulnerability has been resolved:

net: phonet: free phonet_device after RCU grace period

phonet_device_destroy() removes a phonet_device from the per-net device
list with list_del_rcu(), but frees it immediately. RCU readers walking
the same list can still hold a pointer to the object after it has been
removed, leading to a slab-use-after-free.

Use kfree_rcu(), matching the lifetime rule already used by
phonet_address_del() for the same object type.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 2.6.33 < 5.10.260
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.211
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.177
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.144
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.95
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.36
Linux ≫ Linux Kernel Version >= 6.19 < 7.0.13
Linux ≫ Linux Kernel Version7.1 Updaterc1
Linux ≫ Linux Kernel Version7.1 Updaterc2
Linux ≫ Linux Kernel Version7.1 Updaterc3
Linux ≫ Linux Kernel Version7.1 Updaterc4
Linux ≫ Linux Kernel Version7.1 Updaterc5
Linux ≫ Linux Kernel Version7.1 Updaterc6
Linux ≫ Linux Kernel Version7.1 Updaterc7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.033
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://git.kernel.org/stable/c/52b8f5ef82c886f7cd24617915e4b1579ddfd001
Patch
https://git.kernel.org/stable/c/bff309ea51f1395c1ef8be8b75ce62d28a319113
Patch
https://git.kernel.org/stable/c/71de0177b28da751f407581a4515cf4d762f6296
Patch
https://git.kernel.org/stable/c/09c9b92c2010481160245244ea8fa1d06d5d4ae0
Patch
https://git.kernel.org/stable/c/2ec8011cce0cd0fc7a5068585d867fc08d508578
Patch
https://git.kernel.org/stable/c/6cd7067d6e4b0b2033ba2f918ecbd54dc2af3763
Patch
https://git.kernel.org/stable/c/bd2ab4d800fc26814d89328d87b5f97ef6aa906a
Patch
https://git.kernel.org/stable/c/d59794337ea496042288c7c68356d9b9ca7f46a9
Patch