Linux Kernel Use-After-Free Vulnerability in ATM Networking Component

Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's ATM networking component. The issue arises in the 'lec_send()' function, where the 'send()' operation frees the socket buffer (skb) before the length is saved. This oversight can lead to memory being accessed after it has been freed, potentially causing undefined behavior or exploitation.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, allowing for memory corruption or arbitrary code execution.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
7.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.