Linux Kernel Ethtool Module Netdev Reference Leak Vulnerability

A vulnerability in the Linux kernel's ethtool module can lead to a reference leak of the netdev object during firmware flashing operations. This issue arises because the function responsible for flashing module firmware does not properly manage the 'in_progress' flag or the netdev reference. As a result, the device cannot be removed while the operation is ongoing, potentially causing synchronization issues.

Impact

The vulnerability can cause improper management of device references, leading to potential use-after-free conditions or other memory management issues.

Reproduction

The vulnerability can be reproduced by flashing firmware onto a transceiver module using the ethtool command. During this process, the 'in_progress' flag is set and a reference to the netdev is held. If the operation is interrupted or not properly managed, the device may not be correctly released, leading to a reference leak.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.