In the Linux kernel, the following vulnerability has been resolved: net/ncsi: Disable the ncsi work before freeing the associated structure The work function can run after the ncsi device is freed, resulting in use-after-free bugs or kernel panic.
Fix
Patch, vendor advisory and mitigation references on NVD 3
- https://git.kernel.org/stable/c/a0ffa68c70b367358b2672cdab6fa5bc4c40de2c Patch
- https://git.kernel.org/stable/c/dd41dab62f32d9e9e0669af8459d12a93834b238 Patch
- https://git.kernel.org/stable/c/f6ca58696749268181f43150b3553f2bafd71e42 Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 5
- CwesCWE-416NVD modified 2026-10-21 13:17
- Cpes+2 CPE criteria (now 2)NVD modified 2026-10-21 13:17
- StatusPublished → ModifiedNVD modified 2026-10-21 13:17
- CVSS5.5 (v3.1, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)NVD modified 2026-10-21 13:17
- First seenunscored · linuxNVD modified 2026-10-21 12:35
Affected (CPE criteria) 2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.12:rc1:*:*:*:*:*:*
References 4
- https://git.kernel.org/stable/c/64704f231d5dee8639e256507178f43dde1f131c
- https://git.kernel.org/stable/c/a0ffa68c70b367358b2672cdab6fa5bc4c40de2c Patch
- https://git.kernel.org/stable/c/dd41dab62f32d9e9e0669af8459d12a93834b238 Patch
- https://git.kernel.org/stable/c/f6ca58696749268181f43150b3553f2bafd71e42 Patch