Linux Kernel Taprio Use-After-Free Vulnerability in Device Notifier

Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's taprio scheduling feature. The issue arises in the taprio_dev_notifier function, which is not safeguarded by an RCU read-side critical section. This lack of protection can create a race condition with the advance_sched function, leading to memory management errors. The vulnerability has been addressed by adding an RCU read lock in the taprio_dev_notifier function, ensuring proper synchronization and preventing the use-after-free condition.

Impact

Exploitation of this vulnerability could lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.

Added: Jun 30, 2025, 8:23 AM
Updated: Jun 30, 2025, 8:23 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
3.5
remediation
0.0
relevance
0.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.