Use-After-Free Vulnerability in Linux Kernel Affecting OcteonTX2 Products

CVE-2025-39944

What is CVE-2025-39944?

A use-after-free vulnerability exists in the Linux kernel's handling of OcteonTX2 products. This vulnerability arises from the improper cancellation of delayed work items in the 'otx2_ptp_destroy()' function, which may lead to race conditions. When 'otx2_ptp' is deallocated while the delayed work item 'synctstamp_work' is still active, it can result in attempts to dereference the deallocated memory. To mitigate this issue, the code should replace 'cancel_delayed_work()' with 'cancel_delayed_work_sync()' to ensure that all delayed works are finalized before deallocation occurs, thus preventing potential exploitation.

References