CVE-2025-39945

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the cnic module, specifically in the cnic delete task function, that can lead to a use-after-free condition. The issue arises from the use of cancel delayed work() which does not guarantee completion of the delayed work item before the associated cnic dev is deallocated. This is exacerbated by the cyclic nature of the delayed work item and the limitations of flush workqueue(). A race condition can occur where cnic dev is freed while delete task is still active, leading to a dereference of freed memory. The problem was identified through static analysis and reproduced in a QEMU simulation by introducing delays within the cnic delete task() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.