In the Linux kernel, the following vulnerability has been resolved:
can: peak_pci: peak_pci_remove(): fix UAF
When remove the module peek_pci, referencing 'chan' again after releasing 'dev' will cause UAF.
Fix this by releasing 'dev' later.
The following log reveals it:
[ 35.961814 ] BUG: KASAN: use-after-free in peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.963414 ] Read of size 8 at addr ffff888136998ee8 by task modprobe/5537 [ 35.965513 ] Call Trace: [ 35.965718 ] dump_stack_lvl+0xa8/0xd1 [ 35.966028 ] print_address_description+0x87/0x3b0 [ 35.966420 ] kasan_report+0x172/0x1c0 [ 35.966725 ] ? peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.967137 ] ? trace_irq_enable_rcuidle+0x10/0x170 [ 35.967529 ] ? peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.967945 ] __asan_report_load8_noabort+0x14/0x20 [ 35.968346 ] peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.968752 ] pci_device_remove+0xa9/0x250
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade perfUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-rt-coreUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-kvm | Jul 3, 2024 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-tools | Jan 21, 2025 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 3, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernelUpgrade python3-perfUpgrade perf-debuginfo | Jul 16, 2024 | May 22, 2024 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade dtb-xilinxUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kselftests-kmp-defaultUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kernel-default-optionalUpgrade kernel-preempt-develUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade dtb-armUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-rt_debugUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade kernel-64kbUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-preemptUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade reiserfs-kmp-64kb | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linuxUpgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-hwe-5.4Upgrade linux-raspiUpgrade linux-azure-4.15Upgrade linux-ibmUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-aws-fips | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub