In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
Need to call rxrpc_put_peer() for bundle candidate before kfree() as it holds a ref to rxrpc_peer.
[DH: v2: Changed to abstract out the bundle freeing code into a function]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.93-87.444Upgrade perf-debuginfoUpgrade python-perf | May 22, 2025 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rt | Aug 9, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub