7.8

CVE-2026-74548

forcedeth: fix UAF of txrx_stats in nv_remove

In the Linux kernel, the following vulnerability has been resolved:

forcedeth: fix UAF of txrx_stats in nv_remove

nv_remove() frees the per-CPU txrx_stats before unregister_netdev().
Until unregister completes, ndo_get_stats64, the NAPI/xmit data path,
and nv_close()/drain may still access txrx_stats, leading to a
use-after-free.

Free the stats only after unregister_netdev().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f4b633b911fd3b4cbe1dc065e8fb064078d0889d
Version < cdf864d5d3c813ae1876f2bacc1cf3ac3c66dfc9
Status affected
Version f4b633b911fd3b4cbe1dc065e8fb064078d0889d
Version < 7c22b4ee0bd003cecfc14ca28981cb213e201f70
Status affected
Version f4b633b911fd3b4cbe1dc065e8fb064078d0889d
Version < d51ce7a63b76eda02cabfed1b0cc277b2f5c9bcc
Status affected
Version f4b633b911fd3b4cbe1dc065e8fb064078d0889d
Version < cf2dcde2284562ff87830ca0b7fa2b06e95aef1e
Status affected
Version f4b633b911fd3b4cbe1dc065e8fb064078d0889d
Version < c9d24a205fd508b9999fcab6aca4c590490a12cf
Status affected
Version f4b633b911fd3b4cbe1dc065e8fb064078d0889d
Version < ae20a8a4de06a289d40b0a0633d8d573f1fcb049
Status affected
Version f4b633b911fd3b4cbe1dc065e8fb064078d0889d
Version < 201e05aa531eba0dfe2ee05b4e178f6ffa12c8b1
Status affected
Version f4b633b911fd3b4cbe1dc065e8fb064078d0889d
Version < 22666ba1420164753d7b0f5a841986b25ace5435
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.3
Status affected
Version 0
Version < 5.3
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.151
Status unaffected
Version <= 6.12.*
Version 6.12.103
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.027
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/cf2dcde2284562ff87830ca0b7fa2b06e95aef1e
https://git.kernel.org/stable/c/c9d24a205fd508b9999fcab6aca4c590490a12cf
https://git.kernel.org/stable/c/ae20a8a4de06a289d40b0a0633d8d573f1fcb049
https://git.kernel.org/stable/c/201e05aa531eba0dfe2ee05b4e178f6ffa12c8b1
https://git.kernel.org/stable/c/22666ba1420164753d7b0f5a841986b25ace5435
https://git.kernel.org/stable/c/7c22b4ee0bd003cecfc14ca28981cb213e201f70
https://git.kernel.org/stable/c/cdf864d5d3c813ae1876f2bacc1cf3ac3c66dfc9
https://git.kernel.org/stable/c/d51ce7a63b76eda02cabfed1b0cc277b2f5c9bcc