In the Linux kernel, the following vulnerability has been resolved:
perf: hisi: Fix use-after-free when register pmu fails
When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhp_state_remove_instance() to call uncore pmu offline callback, which migrate the pmu context. Since that's liable to lead to some kind of use-after-free.
Use cpuhp_state_remove_instance_nocalls() instead of cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been failed to register.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-5.15.139-93.147Upgrade kernel-debuginfo-common-x86_64 | Dec 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Oct 9, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linux-gkeop-5.15Upgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-xilinx-zynqmpUpgrade linux-hwe-5.15Upgrade linux-raspiUpgrade linux-nvidia-tegraUpgrade linux-oracle-5.15Upgrade linux-gkeopUpgrade linuxUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-azureUpgrade linux-intel-iotgUpgrade linux-gcp-5.15Upgrade linux-kvmUpgrade linux-riscv-5.15Upgrade linux-azure-fdeUpgrade linux-intel-iot-realtimeUpgrade linux-bluefieldUpgrade linux-nvidia-tegra-igxUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-fipsUpgrade linux-awsUpgrade linux-nvidia-6.5Upgrade linux-realtimeUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-5.15 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub