CVE-2024-53183

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc6-g59b723cd2adb

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the use of drvdata in release, which is not available, causing a crash when removing a network device. The crash results in a kernel panic due to a segfault with no mm. The vulnerability is resolved by using container of() to get the uml net instance instead of drvdata.

Recommendations For Linux kernel versions prior to 6.12.0-rc6-g59b723cd2adb, update to a newer version to resolve the issue. As a temporary workaround, consider disabling the removal of network devices to minimize the risk of exploitation.