Linux Kernel Use-After-Free Vulnerability in Driver Management

Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's driver management system. When the driver_attach function fails, it inadvertently frees the driver_private data while the driver is still registered on the bus. This mismatch creates a use-after-free condition. The vulnerability affects several versions of the Linux kernel, though specific versions are not detailed. The issue arises in the driver attachment process, where improper handling of driver data can lead to memory management errors.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, which may be exploited to execute arbitrary code or cause a denial-of-service condition by crashing the system.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.