The vulnerability is a use-After-Free write that occurs when the lan743x network driver processes multi-buffer packets. Specifically, the checksum-success path writes to the ip_summed field through an already freed fragment skb, which can corrupt kernel memory. A memory corruption of this nature could lead to privilege escalation, arbitrary code execution in kernel mode, or a system crash.

Affected systems are Linux kernels that include the lan743x driver. The vendor is Linux. No specific kernel version ranges are listed, so any kernel build containing the driver is potentially affected until the fix is applied.

The CVSS score of 8.1 indicates a high severity. The EPSS score is < 1%, indicating a low probability of exploitation. The vulnerability was detected by KUnit testing and involves a use-After-Free, a serious flaw. The issue is not listed in CISA’s KEV catalog, so there is currently no known widespread exploitation. Until a patch is applied, the risk remains for any system that uses the lan743x interface. The likely attack vector is remote network; an attacker can send specially crafted multi-buffer packets to trigger the use-After-Free write when the driver processes the checksum, potentially allowing memory corruption or privilege escalation.