High · published February 26, 2025
In the Linux kernel, the following vulnerability has been resolved:
ref_tracker: implement use-after-free detection
Whenever ref_tracker_dir_init() is called, mark the struct ref_tracker_dir
as dead.
Test the dead status from ref_tracker_alloc() and ref_tracker_free()
This should detect buggy dev_put()/dev_hold() happening too late
in netdevice dismantle process.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.17, < 5.17.3 | 5.17.3 |