CyberRota Analysis
AI-GeneratedA use-after-free vulnerability exists in the Linux kernel's forcedeth driver, specifically in the nv_remove() function, which improperly frees the txrx_stats structure before the unregister_netdev() call is completed. This flaw could allow an attacker to exploit the race condition, potentially leading to system instability or arbitrary code execution. Linux system administrators and developers working with affected kernel versions should prioritize applying the patch to mitigate the risk.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix UAF of txrx_stats in nv_remove nv_remove() frees the per-CPU txrx_stats before unregister_netdev(). Until unregister completes, ndo_get_stats64, the NAPI/xmit data path, and nv_close()/drain may still access txrx_stats, leading to a use-after-free. Free the stats only after unregister_netdev().