CVE-2023-54310

A use-after-free vulnerability was found in the Linux kernel's mptlan driver. A race condition exists between mptlan_remove() and the post_buckets_task workqueue. When the driver is unloaded, free_netdev() may free the device structure while the workqueue is still accessing it, leading to a use-after-free when the work function references dev->mtu.

The mptlan driver is considered legacy code for older LSI Fusion MPT LAN controllers. This race condition requires specific timing during module unload while workqueue tasks are active, limiting practical exploitability. The upstream maintainer has noted that the driver should likely be removed rather than maintained.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the mptlan module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.