Vulnerability in Linux

CVE-2025-39978

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() This code calls kfree_rcu(new_node, rcu) and then dereferences "new_node" and then dereferences it on th…

EPSS: 0.002 (7.9th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 68fbff68dbea35f9e6f7649dd22fce492a5aedac, 5.14, 0

References