UBUNTU-CVE-2025-40003

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work The origin code calls canceldelayedwork in ocelotstatsdeinit to cancel the cyclic delayed work item ocelot-statswork. However, canceldelayedwork may fail to canc...

CVE-2025-40003

CVE-2025-40003 : In the Linux kernel’s mscc/ocelot code, use-after-free can occur due to cyclic delayed work being canceled inadequately during deinitialization. The code in ocelot_stats_deinit() calls cancel_delayed_work(), which may fail to stop a work item if it is already executing; the delay...