PT-2025-41082 · Linux+1 · Linux Kernel+1
Published
2025-10-07
·
Updated
2025-11-28
·
CVE-2023-53638
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a use-after-free issue in the
octep probe function. If the function fails to retrieve a device's MAC address, it exits while leaving a delayed work item, intr poll task, queued. When this work item later executes, it results in a use-after-free condition. The issue is addressed by moving the cancellation of intr poll task from octep remove to octep device cleanup, ensuring cancellation occurs in the probe error path as well. The cancellation of ctrl mbox task must follow intr poll task’s cancellation because ctrl mbox task may be queued by intr poll task.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Suse