In the Linux kernel, the following vulnerability has been resolved:
can: peak_usb: fix use after free bugs
After calling peak_usb_netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the peak_usb_netif_rx_ni().
Reordering the lines solves the issue.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-docUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extra | Aug 12, 2025 | Aug 11, 2025 |
| Debian | — | Upgrade linux | Apr 21, 2025 | Apr 17, 2025 |
| Oracle_linux | — | Upgrade kernel | Aug 13, 2025 | Apr 17, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 9, 2025 | Apr 17, 2025 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modules | Feb 5, 2026 | Sep 8, 2025 |
| Ubuntu | — | Upgrade linux-azure-4.15Upgrade linuxUpgrade linux-gcp-4.15Upgrade linux-raspi-5.4Upgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-hweUpgrade linux-azureUpgrade linux-awsUpgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-aws-hweUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linux-kvm | May 6, 2025 | Apr 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub