CVSS 7.8 · High EPSS 0,16%
Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.
In the Linux kernel, the following vulnerability has been resolved: media: netup_unidvb: fix use-after-free at del_timer() When Universal DVB card is detaching, netup_unidvb_dma_fini() uses del_timer() to stop dma->timeout timer. But when timer handler netup_unidvb_dma_timeout() is running, del_timer() could not stop it. As a result, the use-after-free bug could happen. The process is shown below: (cleanup routine) | (timer routine) | mod_timer(&dev->tx_sim_timer, ..) netup_unidvb_finidev() | (wait a time) netup_unidvb_dma_fini() | netup_unidvb_dma_timeout() del_timer(&dma->timeout); | | ndev->pci_dev->dev //USE Fix by changing del_timer() to del_timer_sync().
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| linux | linux kernel | Versi 4.3 hingga sebelum 4.14.316 |
| linux | linux kernel | Versi 4.15 hingga sebelum 4.19.284 |
| linux | linux kernel | Versi 4.20 hingga sebelum 5.4.244 |
| linux | linux kernel | Versi 5.5 hingga sebelum 5.10.181 |
| linux | linux kernel | Versi 5.11 hingga sebelum 5.15.113 |
| linux | linux kernel | Versi 5.16 hingga sebelum 6.1.30 |
| linux | linux kernel | Versi 6.2 hingga sebelum 6.3.4 |
| linux | linux kernel | Versi 6.4 rc1 |
| linux | linux kernel | Versi 6.4 rc2 |