In the Linux kernel, the following vulnerability has been resolved:
firewire: net: fix use after free in fwnet_finish_incoming_packet()
The netif_rx() function frees the skb so we can't dereference it to save the skb->len.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | - | 5.15.128 |
| linux / linux_kernel | 5.16 | 6.1.47 |
| linux / linux_kernel | 6.2 | 6.4.12 |