Linux Kernel ieee802154/adf7242 Race Condition Vulnerability Leading to Use-After-Free

Vulnerability

A race condition vulnerability causing a use-after-free issue has been identified in the Linux kernel's ieee802154/adf7242 component. The vulnerability arises because the upper layer is not aware of a detaching event, allowing the adf7242_channel function to be called without proper checks. This can lead to a workqueue being destroyed while it is still in use, creating a potential for exploitation.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, which may be exploited to execute arbitrary code or cause a denial-of-service condition by crashing the system.

Remediation

The vulnerability has been addressed in the official Linux kernel repository. Users should upgrade to the latest version of the Linux kernel where this vulnerability has been patched.

Added: Jun 18, 2025, 9:34 PM
Updated: Jun 18, 2025, 9:34 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.0
remediation
0.0
relevance
0.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.