In the Linux kernel, the following vulnerability has been resolved:
can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
It will trigger UAF for rx_kref of j1939_priv as following.
cpu0 cpu1 j1939_sk_bind(socket0, ndev0, ...) j1939_netdev_start j1939_sk_bind(socket1, ndev0, ...) j1939_netdev_start j1939_priv_set j1939_priv_get_by_ndev_locked j1939_jsk_add ..... j1939_netdev_stop kref_put_lock(&priv->rx_kref, ...) kref_get(&priv->rx_kref, ...) REFCOUNT_WARN("addition on 0;...")
==================================================== refcount_t: addition on 0; use-after-free. WARNING: CPU: 1 PID: 20874 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0 RIP: 0010:refcount_warn_saturate+0x169/0x1e0 Call Trace: j1939_netdev_start+0x68b/0x920 j1939_sk_bind+0x426/0xeb0 ? security_socket_bind+0x83/0xb0
The rx_kref's kref_get() and kref_put() should use j1939_netdev_lock to protect.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade bpftoolUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-64k-modulesUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-64k-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-64k-modules-extraUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-64k-develUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-abi-stablelistsUpgrade rvUpgrade kernel-64k-debugUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-rt | Nov 4, 2024 | May 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Feb 3, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 25, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade libperf-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debug-modules-coreUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade rvUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade bpftool-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo | Aug 1, 2024 | May 22, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-amazonUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade kernel-debugUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade dtb-marvellUpgrade kernel-symsUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade dtb-appleUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-devel | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-gkeopUpgrade linux-raspiUpgrade linux-azure-fipsUpgrade linux-kvmUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-ibmUpgrade linuxUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-aws | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub