CVE-2024-26625

The CVE-2024-26625 entry concerns a Linux kernel issue in the LLC path where a stale sk->sk_wq pointer could remain after releasing an LLC socket. The trace indicates a use-after-free path triggered by sock_wfree and related sk_buff paths. The fix involves a commit that clears sock->sk afte...

Race condition

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a race condition between btfput and mapfree When running ./testprogs -j in my local vm with latest kernel, I once hit a kasan error like below: 1887.184724 BUG: KASAN: slab-use-after-free in bpfrbrootfree+0x1f8/0x2b0...

CVE-2023-52446

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a race condition between btfput and mapfree When running ./testprogs -j in my local vm with latest kernel, I once hit a kasan error like below: 1887.184724 BUG: KASAN: slab-use-after-free in bpfrbrootfree+0x1f8/0x2b0...

CVE-2023-52446 bpf: Fix a race condition between btf_put() and map_free()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a race condition between btfput and mapfree When running ./testprogs -j in my local vm with latest kernel, I once hit a kasan error like below: 1887.184724 BUG: KASAN: slab-use-after-free in bpfrbrootfree+0x1f8/0x2b0...

PT-2024-14674

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc5 Description The vulnerability is a use-after-free UAF bug in the j1939 sk match filter function during setsockoptSO J1939 FILTER calls. This occurs when the setsockopt call modifies the jsk-filters whil...

PT-2023-8763 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.7.0-rc3-00699-g90679706d486-dirty 494 Description: The vulnerability is related to a race condition between btf put and map free in the Linux kernel. This issue can lead to a slab-use-after-free error,...

CVE-2023-3397 Kernel: slab-use-after-free write in txend due to race condition

A race condition occurred between the functions lmLogClose and txEnd in JFS, in the Linux Kernel, executed in different threads. This flaw allows a local attacker with normal user privileges to crash the system or leak internal kernel information...

PT-2025-40207

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-next-20230707 409 Description The Linux kernel contains a flaw in the xfrm subsystem, specifically within the decode session6 function. When the xfrm device is configured with a qdisc of the sfb type, the c...

PT-2025-8810

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0 Description A use-after-free bug was found in the Linux kernel, specifically in the padata reorder function. This issue can be triggered when the padata find next function is called after the pd object has...