CVE-2024-35887

A flaw was found in the ax25 component of the Linux kernel. A use-after-free vulnerability exists due to improper handling of the slave_timer during device detachment. This race condition can occur when ax25_ds_del_timer() is called while the timer handler is still active, leading to memory being freed while still in use. An attacker could potentially exploit this to cause system instability or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.