Description
In the Linux kernel, the following vulnerability has been resolved:
ethtool: do not perform operations on net devices being unregistered
There is a short period between a net device starts to be unregistered
and when it is actually gone. In that time frame ethtool operations
could still be performed, which might end up in unwanted or undefined
behaviours[1].
Do not allow ethtool operations after a net device starts its
unregistration. This patch targets the netlink part as the ioctl one
isn't affected: the reference to the net device is taken and the
operation is executed within an rtnl lock section and the net device
won't be found after unregister.
[1] For example adding Tx queues after unregister ends up in NULL
pointer exceptions and UaFs, such as:
BUG: KASAN: use-after-free in kobject_get+0x14/0x90
Read of size 1 at addr ffff88801961248c by task ethtool/755
CPU: 0 PID: 755 Comm: ethtool Not tainted 5.15.0-rc6+ #778
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-4.fc34 04/014
Call Trace:
dump_stack_lvl+0x57/0x72
print_address_description.constprop.0+0x1f/0x140
kasan_report.cold+0x7f/0x11b
kobject_get+0x14/0x90
kobject_add_internal+0x3d1/0x450
kobject_init_and_add+0xba/0xf0
netdev_queue_update_kobjects+0xcf/0x200
netif_set_real_num_tx_queues+0xb4/0x310
veth_set_channels+0x1c3/0x550
ethnl_set_channels+0x524/0x610
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 5.6 | 5.10.87 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 5.15.15-1 | — |
| Debian 13 | linux | 5.15.15-1 | — |
| Debian 12 | linux | 5.15.15-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux-riscv +20 | No fix yet | — |
| Ubuntu 20.04 LTS | linux-gke +26 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | perf +29 | 5.14.0-162.6.1.el9_1 | RHSA-2022:8267 |
| RHEL 8 | perf +26 | 4.18.0-425.3.1.el8 | RHSA-2022:7683 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP5 | kernel-64kb +4 | 5.14.21-150500.55.80.2 | SUSE-SU-2025:1241-1, SUSE-SU-2024:3483-1 |
| SLES 15 SP5 | kernel-azure +2 | 5.14.21-150500.33.66.1 | SUSE-SU-2024:3190-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.80.2.150500.6.35.6 | SUSE-SU-2025:1241-1, SUSE-SU-2024:3483-1 |
| SLES 15 SP5 | kernel-syms +1 | 5.14.21-150500.55.80.1 | SUSE-SU-2025:1241-1, SUSE-SU-2024:3483-1 |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.100.1.150500.6.47.1 | SUSE-SU-2025:1241-1 |
| SLES for SAP 15 SP5 | kernel-docs +4 | 5.14.21-150500.55.100.1 | SUSE-SU-2025:1241-1 |
| SLE Micro 5.5 | kernel-default | 5.14.21-150500.55.80.2 | SUSE-SU-2025:1241-1, SUSE-SU-2024:3483-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.80.2.150500.6.35.6 | SUSE-SU-2025:1241-1, SUSE-SU-2024:3483-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.67.3 | SUSE-SU-2025:1176-1, SUSE-SU-2024:3209-1 |
| SLE Micro 5.5 | kernel-source | 5.14.21-150500.55.100.1 | SUSE-SU-2025:1241-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.80.2 | SUSE-SU-2025:1241-1, SUSE-SU-2024:3483-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_14 | 7-150500.11.8.1 | SUSE-SU-2024:4125-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_17 | 4-150500.11.6.1 | SUSE-SU-2024:4128-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_7 | 15-150500.2.1 | SUSE-SU-2024:4141-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_10 +1 | 11-150500.11.8.1 | SUSE-SU-2025:0266-1, SUSE-SU-2025:0158-1, SUSE-SU-2024:4218-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_11 +2 | 9-150500.11.6.1 | SUSE-SU-2025:0252-1, SUSE-SU-2025:0115-1, SUSE-SU-2024:4214-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_12 | 9-150500.11.10.1 | SUSE-SU-2025:0253-1, SUSE-SU-2025:0114-1, SUSE-SU-2024:4216-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_13 +1 | 7-150500.11.6.1 | SUSE-SU-2025:0254-1, SUSE-SU-2025:0164-1, SUSE-SU-2025:0146-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_15 +1 | 6-150500.11.6.1 | SUSE-SU-2025:0260-1, SUSE-SU-2025:0138-1, SUSE-SU-2024:4228-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_17 +1 | 2-150500.11.6.1 | SUSE-SU-2025:0181-1, SUSE-SU-2024:4240-1, SUSE-SU-2024:4160-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_19 +1 | 1-150500.11.3.2 | SUSE-SU-2024:3483-1, SUSE-SU-2024:3209-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_25 | 1-150500.11.3.1 | SUSE-SU-2025:1241-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_7 +2 | 14-150500.2.1 | SUSE-SU-2024:4227-1, SUSE-SU-2024:4220-1, SUSE-SU-2024:4120-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_9 | 13-150500.2.1 | SUSE-SU-2024:4206-1 |
| SLE HPC 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.100.1 | SUSE-SU-2025:1241-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.100.1.150500.6.47.1 | SUSE-SU-2025:1241-1 |
| SUSE Real Time Module 15 SP5 | kernel-rt +2 | 5.14.21-150500.13.67.3 | SUSE-SU-2024:3209-1 |
| SUSE Real Time Module 15 SP5 | kernel-syms-rt | 5.14.21-150500.13.67.1 | SUSE-SU-2024:3209-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.5 | dtb-aarch64 +3 | 5.14.21-150500.55.80.1 | SUSE-SU-2024:3483-1 |
| openSUSE Leap 15.5 | kernel-64kb +6 | 5.14.21-150500.55.80.2 | SUSE-SU-2024:3483-1 |
| openSUSE Leap 15.5 | kernel-azure +2 | 5.14.21-150500.33.66.1 | SUSE-SU-2024:3190-1 |
| openSUSE Leap 15.5 | kernel-default-base | 5.14.21-150500.55.80.2.150500.6.35.6 | SUSE-SU-2024:3483-1 |
| openSUSE Leap 15.5 | kernel-rt +2 | 5.14.21-150500.13.67.3 | SUSE-SU-2024:3209-1 |
| openSUSE Leap 15.5 | kernel-syms-rt | 5.14.21-150500.13.67.1 | SUSE-SU-2024:3209-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap Micro 5.5 | kernel-default | 5.14.21-150500.55.80.2 | SUSE-SU-2024:3483-1 |
| openSUSE Leap Micro 5.5 | kernel-default-base | 5.14.21-150500.55.80.2.150500.6.35.6 | SUSE-SU-2024:3483-1 |
| openSUSE Leap Micro 5.5 | kernel-rt | 5.14.21-150500.13.67.3 | SUSE-SU-2024:3209-1 |
Advisories 39
- RHSA-2022:8267 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2022:7683 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- WID-SEC-2024-1235 Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und unspezifische Angriffe BSI CERT-Bund (WID) · Feb 15, 2026
- SUSE-SU-2024:4120-1 Security update for the Linux Kernel RT (Live Patch 8 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0158-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4127-1 Security update for the Linux Kernel RT (Live Patch 16 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0260-1 Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4128-1 Security update for the Linux Kernel RT (Live Patch 17 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0138-1 Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3483-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4122-1 Security update for the Linux Kernel RT (Live Patch 10 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3209-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4125-1 Security update for the Linux Kernel RT (Live Patch 14 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4216-1 Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4214-1 Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4123-1 Security update for the Linux Kernel RT (Live Patch 11 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4206-1 Security update for the Linux Kernel (Live Patch 9 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0146-1 Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4207-1 Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0252-1 Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:1176-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:1241-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4240-1 Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4124-1 Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0254-1 Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0181-1 Security update for the Linux Kernel (Live Patch 17 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0266-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4227-1 Security update for the Linux Kernel (Live Patch 8 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0114-1 Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4228-1 Security update for the Linux Kernel (Live Patch 15 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0253-1 Security update for the Linux Kernel (Live Patch 12 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:3190-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4243-1 Security update for the Linux Kernel (Live Patch 13 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4218-1 Security update for the Linux Kernel (Live Patch 10 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4141-1 Security update for the Linux Kernel RT (Live Patch 7 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4160-1 Security update for the Linux Kernel RT (Live Patch 18 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:4220-1 Security update for the Linux Kernel (Live Patch 7 for SLE 15 SP5) SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0164-1 Security update for the Linux Kernel (Live Patch 14 for SLE 15 SP5) SUSE / openSUSE Security Updates · May 2, 2025
- SUSE-SU-2025:0115-1 Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP5) SUSE / openSUSE Security Updates · May 2, 2025