CVE-2025-39978

Linux Kernel 5.14.0-6.1.155 6.2.0-6.6.109 6.7.0-6.12.50 6.13.0-6.16.10 - Use-After-Free in octeontx2-pf TC Flow Addition

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() This code calls kfree_rcu(new_node, rcu) and then dereferences "new_node" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is an RCU safe region. Re-order it to do the dereferences before queuing up the free.

References (6)

Core 6

Scores

EPSS 0.0019
EPSS Percentile 8.9%

Details

Status published
Products (16)
linux/Kernel 5.14.0 - 6.1.155linux
linux/Kernel 6.13.0 - 6.16.10linux
linux/Kernel 6.2.0 - 6.6.109linux
linux/Kernel 6.7.0 - 6.12.50linux
Linux/Linux < 5.14
Linux/Linux 5.14
Linux/Linux 6.1.155 - 6.1.*
Linux/Linux 6.12.50 - 6.12.*
Linux/Linux 6.16.10 - 6.16.*
Linux/Linux 6.17
... and 6 more
Published Oct 15, 2025
Tracked Since Feb 18, 2026