PT-2026-52253 · Linux · Linux

Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-53157

Mitre

In the Linux kernel, the following vulnerability has been resolved:

net: phonet: free phonet device after RCU grace period

phonet device destroy() removes a phonet device from the per-net device list with list del rcu(), but frees it immediately. RCU readers walking the same list can still hold a pointer to the object after it has been removed, leading to a slab-use-after-free.

Use kfree rcu(), matching the lifetime rule already used by phonet address del() for the same object type.

Identificadores relacionados

CVE-2026-53157

Produtos afetados

Linux

Referências · 4

• https://git.kernel.org/stable/c/bff309ea51f1395c1ef8be8b75ce62d28a319113 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-53157 · Nota de Segurança
• https://git.kernel.org/stable/c/71de0177b28da751f407581a4515cf4d762f6296 · Nota
• https://git.kernel.org/stable/c/52b8f5ef82c886f7cd24617915e4b1579ddfd001 · Nota