In the Linux kernel, the following vulnerability has been resolved:
net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..). If some error happens in emac_tx_fill_tpd(), the skb will be freed via dev_kfree_skb(skb) in error branch of emac_tx_fill_tpd(). But the freed skb is still used via skb->len by netdev_sent_queue(,skb->len).
As i observed that emac_tx_fill_tpd() haven't modified the value of skb->len, thus my patch assigns skb->len to 'len' before the possible free and use 'len' instead of skb->len later.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modules | Jun 6, 2024 | Feb 28, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-4.14.238-182.421Upgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-debuginfo | May 28, 2024 | Feb 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | May 13, 2024 | Feb 28, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-headers | Jul 23, 2024 | Feb 28, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Feb 28, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Feb 28, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | May 30, 2024 | Feb 28, 2024 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernelUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extra | Jun 17, 2024 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-default | Aug 9, 2024 | Feb 28, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-hweUpgrade linux-aws-5.4Upgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-raspiUpgrade linux-fipsUpgrade linuxUpgrade linux-raspi-5.4Upgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-gcp-5.4 | Nov 19, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub