In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: bnep: fix wild-memory-access in proto_unregister
There's issue as follows: KASAN: maybe wild-memory-access in range [0xdead...108-0xdead...10f] CPU: 3 UID: 0 PID: 2805 Comm: rmmod Tainted: G W RIP: 0010:proto_unregister+0xee/0x400 Call Trace: <TASK> __do_sys_delete_module+0x318/0x580 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f
As bnep_init() ignore bnep_sock_init()'s return value, and bnep_sock_init() will cleanup all resource. Then when remove bnep module will call bnep_sock_cleanup() to cleanup sock's resource. To solve above issue just return bnep_sock_init()'s return value in bnep_exit().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-64kUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade rvUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade libperfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-uki-virtUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-rt-modules-coreUpgrade kernel-64k-coreUpgrade kernel-docUpgrade kernel-rt-debug-modules-extra | Jan 14, 2025 | Nov 7, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Nov 7, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Dec 17, 2024 | Nov 7, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Feb 10, 2025 | Nov 7, 2024 |
| Ubuntu | — | Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-5.4.0-208-genericUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-5.4.0-1138-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1127-kvmUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-realtimeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-cvmUpgrade linux-image-oem-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.4.0-208-lowlatencyUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1099-bluefieldUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-oemUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1186-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-5.4.0-1140-awsUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-208-generic-lpaeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.4.0-1143-gcpUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-4.15.0-235-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1086-ibmUpgrade linux-image-4.15.0-1178-awsUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-4.4.0-1179-awsUpgrade linux-image-fipsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.4.0-1145-azureUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-lts-24.04 | Feb 20, 2025 | Nov 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Nov 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub