AZL-96204
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-96204.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-96204
- Upstream
- Published
- 2026-08-15T13:18:00Z
- Modified
- 2026-09-21T05:34:22Z
- Summary
- CVE-2026-74548 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
forcedeth: fix UAF of txrx_stats in nv_remove
nv_remove() frees the per-CPU txrx_stats before unregister_netdev(). Until unregister completes, ndo_get_stats64, the NAPI/xmit data path, and nv_close()/drain may still access txrx_stats, leading to a use-after-free.
Free the stats only after unregister_netdev().
- References