Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(max. allowed matches exceeded)
created 3 weeks, 3 days ago Activity log
  • Created & dismissed (max. allowed matches exceeded) suggestion
forcedeth: fix UAF of txrx_stats in nv_remove

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove nv_remove() frees the per-CPU txrx_stats before unregister_netdev(). Until unregister completes, ndo_get_stats64, the NAPI/xmit data path, and nv_close()/drain may still access txrx_stats, leading to a use-after-free. Free the stats only after unregister_netdev().

Affected products

Linux
  • <5.3
  • <201e05aa531eba0dfe2ee05b4e178f6ffa12c8b1
  • =<6.6.*
  • =<*
  • <22666ba1420164753d7b0f5a841986b25ace5435
  • =<6.18.*
  • =<6.12.*
  • =<7.1.*
  • ==5.3
  • <cf2dcde2284562ff87830ca0b7fa2b06e95aef1e
  • <c9d24a205fd508b9999fcab6aca4c590490a12cf
  • <ae20a8a4de06a289d40b0a0633d8d573f1fcb049