In the Linux kernel, the following vulnerability has been resolved:
drbd: use after free in drbd_create_device()
The drbd_destroy_connection() frees the "connection" so use the _safe() iterator to prevent a use after free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.301-224.520Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade perfUpgrade kernel-livepatch-5.10.157-139.675Upgrade kernel-debuginfo-common-aarch64 | Jun 23, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade linux-nvidia-tegra-5.15Upgrade linux-iotUpgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-gkeopUpgrade linux-aws-hweUpgrade linux-azure-4.15Upgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-oracle-5.4Upgrade linux-azure-fipsUpgrade linux-gcp-4.15Upgrade linux-azure-5.15Upgrade linuxUpgrade linux-ibm-5.4Upgrade linux-aws-5.4Upgrade linux-oracle-5.15Upgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-nvidiaUpgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-aws-5.15Upgrade linux-riscv-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-intel-iotgUpgrade linux-hweUpgrade linux-raspi-5.4Upgrade linux-azure-fdeUpgrade linux-intel-iot-realtimeUpgrade linux-xilinx-zynqmpUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-azure-5.4Upgrade linux-gcp | May 6, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub