In the Linux kernel, the following vulnerability has been resolved:
regmap: set debugfs_name to NULL after it is freed
There is a upstream commit cffa4b2122f5("regmap:debugfs: Fix a memory leak when calling regmap_attach_dev") that adds a if condition when create name for debugfs_name. With below function invoking logical, debugfs_name is freed in regmap_debugfs_exit(), but it is not created again because of the if condition introduced by above commit. regmap_reinit_cache() regmap_debugfs_exit() ... regmap_debugfs_init() So, set debugfs_name to NULL after it is freed.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Aug 2, 2024 | Feb 29, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 29, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-preempt-develUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-default | Aug 9, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-awsUpgrade linuxUpgrade linux-azureUpgrade linux-gkeopUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-gcp-5.4Upgrade linux-aws-5.4Upgrade linux-gcpUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-oracle-5.4Upgrade linux-hwe-5.4 | Nov 19, 2024 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub