In the Linux kernel, the following vulnerability has been resolved:
can: peak_pci: peak_pci_remove(): fix UAF
When remove the module peek_pci, referencing 'chan' again after releasing 'dev' will cause UAF.
Fix this by releasing 'dev' later.
The following log reveals it:
[ 35.961814 ] BUG: KASAN: use-after-free in peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.963414 ] Read of size 8 at addr ffff888136998ee8 by task modprobe/5537 [ 35.965513 ] Call Trace: [ 35.965718 ] dump_stack_lvl+0xa8/0xd1 [ 35.966028 ] print_address_description+0x87/0x3b0 [ 35.966420 ] kasan_report+0x172/0x1c0 [ 35.966725 ] ? peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.967137 ] ? trace_irq_enable_rcuidle+0x10/0x170 [ 35.967529 ] ? peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.967945 ] __asan_report_load8_noabort+0x14/0x20 [ 35.968346 ] peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.968752 ] pci_device_remove+0xa9/0x250
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-develUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-headers | Jul 3, 2024 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade bpftool | Jan 21, 2025 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 3, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-headers | Jul 16, 2024 | May 22, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kernel-azure-baseUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-default-manUpgrade kernel-preemptUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-zfcpdump | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-kvmUpgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linux-aws-hweUpgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-oracleUpgrade linux-raspi-5.4Upgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-hwe-5.4Upgrade linux-aws-5.4Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-hweUpgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linux-azure-fips | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub