Mrpre

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A use-after-free issue exists in the `caif serial` component of the Linux kernel. A race condition occurs between the `ldisc close()` function and packet transmission. Specifically, `ldisc close()` calls `tty kref put()` while the network device is still active and capable of receiving packets. This allows the `handle tx()` function to access the `ser->tty` variable after the tty object has been freed, leading to a memory corruption when calling `tty->ops->write()`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.