In the Linux kernel, the following vulnerability has been resolved:
selinux: fix NULL-pointer dereference when hashtab allocation fails
When the hash table slot array allocation fails in hashtab_init(), h->size is left initialized with a non-zero value, but the h->htable pointer is NULL. This may then cause a NULL pointer dereference, since the policydb code relies on the assumption that even after a failed hashtab_init(), hashtab_map() and hashtab_destroy() can be safely called on it. Yet, these detect an empty hashtab only by looking at the size.
Fix this by making sure that hashtab_init() always leaves behind a valid empty hashtab when the allocation fails.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.82-83.359 | Aug 28, 2024 | Apr 10, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade kernel-azureUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-debugUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-rt-livepatchUpgrade kernel-64kbUpgrade dtb-armUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade kernel-syms-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade dtb-mediatek | Aug 9, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub