PT-2025-37971 · Linux+4 · Linux Kernel+4
Published
2025-01-01
·
Updated
2026-05-07
·
CVE-2025-39826
CVSS v3.1
7.0
High
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The 'use' field within the
rose neigh structure was not atomic, leading to potential race conditions. Specifically, the structure could be freed while still being referenced, potentially resulting in use-after-free issues. This could occur during an ioctl operation via the rose rt ioctl() function when the rose neigh->use field reached zero while a timer was still active. The issue was addressed by changing the type of the 'use' field to refcount t and updating code paths to utilize rose neigh hold() and rose neigh put() for atomic reference counting.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu