The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
Struct pcie_link_state->downstream is a pointer to the pci_dev of function 0. Previously we retained that pointer when removing function 0, and subsequent ASPM policy changes dereferenced it, resulting in a use-after-free warning from KASAN, e.g.:
# echo 1 > /sys/bus/pci/devices/0000:03:00.0/remove # echo powersave > /sys/module/pcie_aspm/parameters/policy
BUG: KASAN: slab-use-after-free in pcie_config_aspm_link+0x42d/0x500 Call Trace: kasan_report+0xae/0xe0 pcie_config_aspm_link+0x42d/0x500 pcie_aspm_set_policy+0x8e/0x1a0 param_attr_store+0x162/0x2c0 module_attr_store+0x3e/0x80
PCIe spec r6.0, sec 7.5.3.7, recommends that software program the same ASPM Control value in all functions of multi-function devices.
Disable ASPM and free the pcie_link_state when any child function is removed so we can discard the dangling pcie_link_state->downstream pointer and maintain the same ASPM Control configuration for all functions.
[bhelgaas: commit log and comment]
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.122-77.145 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernelUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.41-63.109Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Oct 16, 2025 | Sep 18, 2025 |
| Debian | — | Upgrade linux | Sep 22, 2025 | Sep 22, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Feb 3, 2026 | Jan 30, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-gkeUpgrade linux-ibm-5.15Upgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-hwe-5.15Upgrade linuxUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-lowlatencyUpgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-gcp-fipsUpgrade linux-ibm-5.4Upgrade linux-gcp-5.4Upgrade linux-oracle-5.15Upgrade linux-azure-5.4Upgrade linux-raspiUpgrade linux-nvidiaUpgrade linux-azure-fipsUpgrade linux-raspi-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-intel-iotgUpgrade linux-nvidia-tegraUpgrade linux-gcpUpgrade linux-iotUpgrade linux-riscv-5.15Upgrade linux-azure-fdeUpgrade linux-aws-5.15Upgrade linux-realtimeUpgrade linux-nvidia-tegra-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-azureUpgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-intel-iotg-5.15 | Sep 26, 2025 | Sep 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 18, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub