PT-2025-18476 · Linux+6 · Linux Kernel+6
CVE-2025-37796
·
Publicado
2025-04-02
·
Atualizado
2026-05-26
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use after free issue has been resolved in the Linux kernel. The problem occurs when the memory pointed to by
priv is freed at the end of the at76 delete device function, but the code then attempts to access the udev field of the freed object to put the USB device. This may also lead to a memory leak of the USB device. The issue is fixed by using udev from the interface.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu