Vulnerabilities

CVSS

7.8 High

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.13%

Risk score

2.0

Published

2026-08-15

Status

Published

In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove nv_remove() frees the per-CPU txrx_stats before unregister_netdev(). Until unregister completes, ndo_get_stats64, the NAPI/xmit data path, and nv_close()/drain may still access txrx_stats, leading to a use-after-free. Free the stats only after unregister_netdev().

Coverage 1

threat-intel

Multiples vulnérabilités dans le noyau Linux de Debian (28 août 2026)

Multiple vulnerabilities have been discovered in the Linux kernel of Debian. These vulnerabilities allow for privilege escalation, data compromise, and denial of service. The affected Debian versions are prior to 6.12.10…

CERT-FR · 5d ago CriticalCVSS 9.8

CVE-2025-38525CVE-2025-40054CVE-2026-43197vulnerabilitylinuxdebian

All articles mentioning it

Advisories and references

• git.kernel.org/stable/c/cdf864d5d3c813ae1876f2bacc1cf3ac3c66dfc9
• git.kernel.org/stable/c/7c22b4ee0bd003cecfc14ca28981cb213e201f70
• git.kernel.org/stable/c/d51ce7a63b76eda02cabfed1b0cc277b2f5c9bcc
• git.kernel.org/stable/c/cf2dcde2284562ff87830ca0b7fa2b06e95aef1e
• git.kernel.org/stable/c/c9d24a205fd508b9999fcab6aca4c590490a12cf
• git.kernel.org/stable/c/ae20a8a4de06a289d40b0a0633d8d573f1fcb049
• git.kernel.org/stable/c/201e05aa531eba0dfe2ee05b4e178f6ffa12c8b1
• git.kernel.org/stable/c/22666ba1420164753d7b0f5a841986b25ace5435