CVE-2026-53247: net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown
In the Linux kernel, the following vulnerability has been resolved:
Other sources
net: ethernet: mtkethsoc: Fix use-after-free in metadata dst teardown
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.7-1Fixed in 7.1.8-1 - Compensating control
Ensure the dst (metadata_dst) remains valid until all RCU readers complete; metadata teardown must provide RCU read-side protection for any skb that holds a noref pointer to the metadata_dst.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53247?
The severity of CVE-2026-53247 is rated at 43.
How do I fix CVE-2026-53247?
To fix CVE-2026-53247, update the Linux kernel to the latest version where the vulnerability has been patched.
What type of vulnerability is CVE-2026-53247?
CVE-2026-53247 is classified as a Use After Free vulnerability.
Which software is affected by CVE-2026-53247?
CVE-2026-53247 affects the MediaTek mtk_eth_soc component in the Linux kernel.
What are the potential impacts of CVE-2026-53247?
The potential impacts of CVE-2026-53247 may include system instability or exploitation by attackers resulting from improper memory management.