In the Linux kernel, the following vulnerability has been resolved:
net: ti: fix UAF in tlan_remove_one
priv is netdev private data and it cannot be used after free_netdev() call. Using priv after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-modules | Jul 3, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 3, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 3, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-coreUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo | Jul 16, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-default-manUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-macros | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-gcp-4.15Upgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-awsUpgrade linux-hweUpgrade linux-aws-hweUpgrade linux-azure-4.15Upgrade linux-raspiUpgrade linux-ibmUpgrade linux-azureUpgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linux-oracle-5.4Upgrade linuxUpgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-gcp-5.4Upgrade linux-hwe-5.4 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub