Linux Kernel Ref Tracker Use-After-Free Vulnerability

Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's reference tracking mechanism for network devices. The issue arises during the device dismantling process, where improper handling of reference counts can lead to accessing freed memory. This vulnerability has been addressed by implementing detection for such use-after-free scenarios, ensuring that reference tracking correctly marks structures as dead and checks this status during allocation and deallocation of references.

Impact

Exploitation of this vulnerability could lead to use-after-free conditions, potentially allowing for arbitrary code execution or memory corruption.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.