ROS-20260924-73-0078

The vulnerability of the otx2tcaddflow function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2tc.c file of the Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker t...

Marvell Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the otx2tcaddflow function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2tc.c file of the Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker t...

Linux Distros Unpatched Vulnerability : CVE-2025-39978

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences newnode and then dereferences it on the...

SUSE CVE-2025-39978

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()

...

EUVD-2025-34594

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

CVE-2025-39978

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

CVE-2025-39978 octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

CVE-2025-39978

The CVE-2025-39978 issue involves the octeontx2-pf driver (Linux kernel) in otx2_tc_add_flow(): after calling kfree_rcu(new_node, rcu), the code dereferences new_node on subsequent lines and then acquires a mutex, which is not within a safe RCU region. This is a use-after-free/root cause: freed m...

CVE-2025-39978 octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

CVE-2025-39978: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2tcaddflow This code calls kfreercunewnode, rcu and then dereferences "newnode" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a risk of post-release reuse in the otx2tcaddflow function, which could lead to memory corruption...