In the Linux kernel, the following vulnerability has been resolved:
lib: cpu_rmap: Avoid use after free on rmap->obj array entries
When calling irq_set_affinity_notifier() with NULL at the notify argument, it will cause freeing of the glue pointer in the corresponding array entry but will leave the pointer in the array. A subsequent call to free_irq_cpu_rmap() will try to free this entry again leading to possible use after free.
Fix that by setting NULL to the array entry and checking that we have non-zero at the array entry when iterating over the array in free_irq_cpu_rmap().
The current code does not suffer from this since there are no cases where irq_set_affinity_notifier(irq, NULL) (note the NULL passed for the notify arg) is called, followed by a call to free_irq_cpu_rmap() so we don't hit and issue. Subsequent patches in this series excersize this flow, hence the required fix.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade python-perfUpgrade kernel-livepatch-5.15.117-72.142Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-4.14.318-240.529 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perf | Oct 16, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-azure-5.15Upgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-oracleUpgrade linuxUpgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-nvidia-tegra-igxUpgrade linux-intel-iot-realtimeUpgrade linux-riscv-5.15Upgrade linux-ibm-5.15Upgrade linux-gcp-5.4Upgrade linux-azure-5.4Upgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-ibmUpgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-ibm-5.4Upgrade linux-raspi-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-raspiUpgrade linux-nvidia-tegra-5.15Upgrade linux-azureUpgrade linux-oracle-5.15Upgrade linux-hwe-5.15Upgrade linux-realtimeUpgrade linux-bluefieldUpgrade linux-lowlatencyUpgrade linux-aws-5.15Upgrade linux-aws-5.4Upgrade linux-iotUpgrade linux-nvidia-tegraUpgrade linux-intel-iotg-5.15Upgrade linux-kvmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-oracle-5.4Upgrade linux-gkeUpgrade linux-gcp-5.15 | Oct 10, 2025 | Oct 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub