Use After Free Vulnerability in Linux Kernel's OcteonTX2-PF

CVE-2025-39978

What is CVE-2025-39978?

A vulnerability has been identified in the Linux kernel associated with the OcteonTX2-PF driver. The flaw arises during the handling of node structures, where dereferencing occurs after freeing the memory, leading to potential security risks. The code execution path incorrectly dereferences 'new_node' after it has been queued for free, indicating that the region is not safe for Read-Copy-Update (RCU) usage. To mitigate the risk, the code should be modified to ensure that dereferences take place prior to the freeing of the node.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References