In the Linux kernel, the following vulnerability has been resolved:
phylib: fix potential use-after-free
Commit bafbdd527d56 ("phylib: Add device reset GPIO support") added call to phy_device_reset(phydev) after the put_device() call in phy_detach().
The comment before the put_device() call says that the phydev might go away with put_device().
Fix potential use-after-free by calling phy_device_reset() before put_device().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-docUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-devel | Sep 26, 2024 | Jun 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.96-90.460Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools | Aug 2, 2024 | Jun 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade python3-perfUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-devel | Jan 21, 2025 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | Jun 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 20, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 13, 2024 | Jun 20, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-devel | Oct 2, 2024 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-default-manUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-preemptUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade kernel-preempt-develUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-develUpgrade dlm-kmp-rt | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-ibmUpgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-azure-5.4Upgrade linux-aws-5.4Upgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-iotUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-aws | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub