In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v3-its: Prevent double free on error
The error handling path in its_vpe_irq_domain_alloc() causes a double free when its_vpe_init() fails after successfully allocating at least one interrupt. This happens because its_vpe_irq_domain_free() frees the interrupts along with the area bitmap and the vprop_page and its_vpe_irq_domain_alloc() subsequently frees the area bitmap and the vprop_page again.
Fix this by unconditionally invoking its_vpe_irq_domain_free() which handles all cases correctly and by removing the bitmap/vprop_page freeing from its_vpe_irq_domain_alloc().
[ tglx: Massaged change log ]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-develUpgrade kernel-docUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-kvm | Aug 12, 2024 | May 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.348-265.562Upgrade bpftoolUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.158-103.164Upgrade python-perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo | Sep 16, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.90-99.173 | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 17, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | May 17, 2024 |
| Rocky_linux | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-rtUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade perfUpgrade kernel-modulesUpgrade kernel-core | Aug 22, 2024 | May 17, 2024 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade kernel-default-develUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade dtb-socionextUpgrade dtb-amazonUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade dtb-renesasUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-extraUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-64kb-livepatch-devel | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1184-azureUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-gke-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-oemUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-intelUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-232-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-lpae | Jul 15, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub