CVE Database›Document archive›CVE-2026-53248

CVE-2026-53248

kernel: net: airoha: Fix use-after-free in metadata dst teardown

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's airoha network driver. This use-after-free vulnerability occurs when the airoha_metadata_dst_free() function frees memory prematurely, before all references to it are released. If a network packet still holds a pointer to the freed memory, a use-after-free condition can arise. This could lead to system instability or potentially allow an attacker to escalate privileges.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-911 · Improper Update of Reference Count