CVE-2025-39945

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: cnic: Fix use-after-free bugs in cnic_delete_task The original code uses cancel_delayed_work() in cnic_cm_stop_bnx2x_hw(), which does not guarantee that the delayed work item 'delete_task' has fully completed if it was already running. Additionally, the delayed work item is cyclic, the flush_workqueue() in cnic_cm_stop_bnx2x_hw() only blocks and waits for work items that were already queued to the workqueue prior to its invocation. Any work items submitted after flush_workqueue() is called are not included in the set of tas...

Affected product and versions

Product

Linux Linux, linux kernel

Affected versions

>= fdf24086f4752aee5dfb40143c736250df017820 < fde6e73189f40ebcf0633aed2b68e731c25f3aa3, >= fdf24086f4752aee5dfb40143c736250df017820 < 7b6a5b0a6b392263c3767fc945b311ea04b34bbd, >= fdf24086f4752aee5dfb40143c736250df017820 < 0405055930264ea8fd26f4131466fa7652e5e47d, >= fdf24086f4752aee5dfb40143c736250df017820 < e1fcd4a9c09feac0902a65615e866dbf22616125, >= fdf24086f4752aee5dfb40143c736250df017820 < 8eeb2091e72d75df8ceaa2172638d61b4cf8929a, >= fdf24086f4752aee5dfb40143c736250df017820 < 6e33a7eed587062ca8161ad1f4584882a860d697, >= fdf24086f4752aee5dfb40143c736250df017820 < 0627e1481676669cae2df0d85b5ff13e7d24c390, >= fdf24086f4752aee5dfb40143c736250df017820 < cfa7d9b1e3a8604afc84e9e51d789c29574fb216, >= 2.6.37, >= 2.6.37 < 5.4.300, >= 5.5 < 5.10.245, >= 5.11 < 5.15.194, >= 5.16 < 6.1.154, >= 6.2 < 6.6.108, >= 6.7 < 6.12.49, >= 6.13 < 6.16.9, 6.17

Fixed versions

5.4.300, 5.10.245, 5.15.194, 6.1.154, 6.6.108, 6.12.49, 6.16.9

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-416