Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: NET: caif: Fixed a use-after-free in cfusbldevicenotify. syzbot reported a use-after-free in cfusbldevicenotify 1. This causes a stack trace like below: BUG: KASAN: Use-after-free in cfusbldevicenotify+0x7c9/0x870,...

The vulnerability of the cfusbl_device_notify() function in the net/caif/caif_usb.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cfusbldevicenotify function in the net/caif/caifusb.c module, which is part of the Linux kernel’s networking functions, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992929)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992929 advisory. In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbldevicenotify syzbot reported use-after-free in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992672)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992672 advisory. In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbldevicenotify syzbot reported use-after-free in...

SUSE CVE-2023-53138

In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbldevicenotify syzbot reported use-after-free in cfusbldevicenotify 1. This causes a stack trace like below: BUG: KASAN: use-after-free in cfusbldevicenotify+0x7c9/0x870 net/caif/caifusb.c:138...

UBUNTU-CVE-2023-53138

In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbldevicenotify syzbot reported use-after-free in cfusbldevicenotify 1. This causes a stack trace like below: BUG: KASAN: use-after-free in cfusbldevicenotify+0x7c9/0x870 net/caif/caifusb.c:138...

CVE-2023-53138

CVE-2023-53138 corresponds to a Linux kernel vulnerability in the net/caif stack (cfusbl_device_notify). When NETDEV_UNREGISTER is delivered multiple times during device teardown, a use-after-free can occur and there can be an imbalance in the module’s reference count, potentially freeing the par...

CVE-2023-53138 net: caif: Fix use-after-free in cfusbl_device_notify()

In the Linux kernel, the following vulnerability has been resolved: net: caif: Fix use-after-free in cfusbldevicenotify syzbot reported use-after-free in cfusbldevicenotify 1. This causes a stack trace like below: BUG: KASAN: use-after-free in cfusbldevicenotify+0x7c9/0x870 net/caif/caifusb.c:138...

Linux kernel security vulnerabilities

The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel due to a memory leak in the cfusbldevicenotify method of the net module...

PT-2023-36728

Уязвимость функции cfusbl device notify модуля net/caif/caif usb.c реализации сетевых функций ядра операционной системы Linux связана с ошибками при обновлении счетчика ссылок. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность...

PT-2021-29204

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.19.193 Description A memory leak issue exists in the cfusbl device notify function of the Linux Kernel's caif module. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-29239

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.10.42 Description A memory leak issue was discovered in the Linux Kernel. The issue is related to the cfusbl device notify function in the caif module. The actual impact and attack plausibility have not yet...

PT-2021-29274

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 5.12.9 Description A memory leak issue exists in the cfusbl device notify function of the Linux Kernel's CAIF Common Application Interface Framework module. The actual impact and attack plausibility of this...

PT-2021-25201

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.14.235 Description A memory leak issue exists in the Linux Kernel. The issue is related to the cfusbl device notify function in the caif module. It was introduced in version v3.3 and fixed in version...

PT-2021-25185

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.4.271 Description A memory leak issue exists in the cfusbl device notify function of the Linux Kernel's CAIF Common Application Interface Framework module. The actual impact and attack plausibility of this...

PT-2021-29187

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.272 Description A memory leak issue exists in the Linux Kernel, specifically in the cfusbl device notify function of the CAIF Common Application Interface Framework module. The actual impact and attack...

PT-2021-29195

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.3 through 4.14.235 Description A memory leak issue exists in the Linux Kernel. The issue is related to the cfusbl device notify function in the caif module. This problem was introduced in version v3.3 and is fixed in...