In the Linux kernel, the following vulnerability has been resolved:
net: hso: fix NULL-deref on disconnect regression
Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointer dereference on every disconnect instead.
Specifically, the serial device table must no longer be accessed after the minor has been released by hso_serial_tty_unregister().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.232-176.381Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perf | Mar 19, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | May 13, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Jul 23, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade kernel-trace-baseUpgrade kernel-symsUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-xen-develUpgrade kernel-source-azureUpgrade kernel-preemptUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-ec2-baseUpgrade kernel-xenUpgrade kernel-64kbUpgrade kernel-azure-baseUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade kernel-traceUpgrade kernel-default-manUpgrade kernel-ec2-develUpgrade kernel-azure-develUpgrade kernel-trace-develUpgrade kernel-ec2Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-devel-azure | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-aws-fipsUpgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-hweUpgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-aws-hweUpgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-kvmUpgrade linux-raspiUpgrade linux-azureUpgrade linux-azure-4.15Upgrade linux-gcp | Nov 19, 2024 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub