What happened
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors module_flash_fw_schedule() is missing undo for setting the "in_progress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we are holding rtnl_lock.
Affected versions
Linux: 32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e through before f7b4513e77f9571dc1041a798b93b5c4a4bfc191 (git); 32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e through before 61848c83b9132ab839809fe415ba7802a0aca4f6 (git); 32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e through before 956b134d917fd7e014dc7e39a9b7610c04fcc9ba (git); 32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e through before fb7f511d62692661846c47f199e0afe25c2982db (git); 6.11 Fixed: See vendor advisory.
Why it matters
Review the vendor advisory and exposure of the affected product to determine operational impact.
Detection & mitigation
- Apply vendor-provided updates or mitigations.
- Review affected product exposure and access logs.
Public PoC references
No public PoC reference has passed the current publication threshold.