In the Linux kernel, the following vulnerability has been resolved:
loop: Fix use-after-free issues
do_req_filebacked() calls blk_mq_complete_request() synchronously or asynchronously when using asynchronous I/O unless memory allocation fails. Hence, modify loop_handle_cmd() such that it does not dereference 'cmd' nor 'rq' after do_req_filebacked() finished unless we are sure that the request has not yet been completed. This patch fixes the following kernel crash:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000054 Call trace: css_put.42938+0x1c/0x1ac loop_process_work+0xc8c/0xfd4 loop_rootcg_workfn+0x24/0x34 process_one_work+0x244/0x558 worker_thread+0x400/0x8fc kthread+0x16c/0x1e0 ret_from_fork+0x10/0x20
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.15.104-63.140Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernelUpgrade kernel-livepatch-6.1.21-1.45Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-devel | Aug 5, 2025 | May 2, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-azure-5.15Upgrade linux-hwe-5.15Upgrade linux-realtimeUpgrade linux-gkeopUpgrade linux-xilinx-zynqmpUpgrade linux-awsUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-nvidiaUpgrade linux-ibmUpgrade linux-gcp-5.15Upgrade linux-raspiUpgrade linux-intel-iotg-5.15Upgrade linux-azureUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcpUpgrade linux-nvidia-tegra-igxUpgrade linux-nvidia-tegraUpgrade linux-intel-iot-realtimeUpgrade linux-aws-5.15Upgrade linux-oracle-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linuxUpgrade linux-bluefieldUpgrade linux-riscv-5.15Upgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-intel-iotgUpgrade linux-ibm-5.15 | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub