Back to search
CVE-2025-39978
Published: Oct 15, 2025
Modified: May 11, 2026
PUBLISHED
Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() This code calls kfree_rcu(new_node, rcu) and then dereferences "new_node" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is an RCU safe region. Re-order it to do the dereferences before queuing up the free.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 68fbff68dbea35f9e6f7649dd22fce492a5aedac - < 5723120423a753a220b8b2954b273838b9d7e74aaffected 68fbff68dbea35f9e6f7649dd22fce492a5aedac - < df2c071061ed52d2225d97b212d27ecedf456b8aaffected 68fbff68dbea35f9e6f7649dd22fce492a5aedac - < c41b2941a024d4ec7c768e16ffb10a74b188fcedaffected 68fbff68dbea35f9e6f7649dd22fce492a5aedac - < a8a63f27c3a8a3714210d32b12fd0f16d0337414affected 68fbff68dbea35f9e6f7649dd22fce492a5aedac - < d9c70e93ec5988ab07ad2a92d9f9d12867f02c56 |
Linux | Linux | affected 5.14unaffected 0 - < 5.14unaffected 6.1.155 - <= 6.1.*unaffected 6.6.109 - <= 6.6.*unaffected 6.12.50 - <= 6.12.*+2 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now