net/ncsi: Disable the ncsi work before freeing the associated structure
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.6.160, 6.10.14, 6.11.3
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
From 2d283bdd079c0ad4da020bbc9e9c2a4280823098 · fixed in 64704f231d5dee8639e256507178f43dde1f131c; From 2d283bdd079c0ad4da020bbc9e9c2a4280823098 · fixed in f6ca58696749268181f43150b3553f2bafd71e42; From 2d283bdd079c0ad4da020bbc9e9c2a4280823098 · fixed in dd41dab62f32d9e9e0669af8459d12a93834b238; From 2d283bdd079c0ad4da020bbc9e9c2a4280823098 · fixed in a0ffa68c70b367358b2672cdab6fa5bc4c40de2c
- Linux Linux
4.8
- KernelLinux
From 4.8.0 · fixed in 6.6.160; From 6.7.0 · fixed in 6.10.14; From 6.11.0 · fixed in 6.11.3