In the Linux kernel, the following vulnerability has been resolved:
gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
The gtp_net_ops pernet operations structure for the subsystem must be registered before registering the generic netlink family.
Syzkaller hit 'general protection fault in gtp_genl_dump_pdp' bug:
general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] CPU: 1 PID: 5826 Comm: gtp Not tainted 6.8.0-rc3-std-def-alt1 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-alt1 04/01/2014 RIP: 0010:gtp_genl_dump_pdp+0x1be/0x800 [gtp] Code: c6 89 c6 e8 64 e9 86 df 58 45 85 f6 0f 85 4e 04 00 00 e8 c5 ee 86 df 48 8b 54 24 18 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 de 05 00 00 48 8b 44 24 18 4c 8b 30 4c 39 f0 74 RSP: 0018:ffff888014107220 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffff88800fcda588 R14: 0000000000000001 R15: 0000000000000000 FS: 00007f1be4eb05c0(0000) GS:ffff88806ce80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1be4e766cf CR3: 000000000c33e000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> ? show_regs+0x90/0xa0 ? die_addr+0x50/0xd0 ? exc_general_protection+0x148/0x220 ? asm_exc_general_protection+0x22/0x30 ? gtp_genl_dump_pdp+0x1be/0x800 [gtp] ? __alloc_skb+0x1dd/0x350 ? __pfx___alloc_skb+0x10/0x10 genl_dumpit+0x11d/0x230 netlink_dump+0x5b9/0xce0 ? lockdep_hardirqs_on_prepare+0x253/0x430 ? __pfx_netlink_dump+0x10/0x10 ? kasan_save_track+0x10/0x40 ? __kasan_kmalloc+0x9b/0xa0 ? genl_start+0x675/0x970 __netlink_dump_start+0x6fc/0x9f0 genl_family_rcv_msg_dumpit+0x1bb/0x2d0 ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 ? genl_op_from_small+0x2a/0x440 ? cap_capable+0x1d0/0x240 ? __pfx_genl_start+0x10/0x10 ? __pfx_genl_dumpit+0x10/0x10 ? __pfx_genl_done+0x10/0x10 ? security_capable+0x9d/0xe0
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.152-100.162Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.213-201.855Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Dec 12, 2024 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade bpftool | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade dtb-amazonUpgrade dtb-marvellUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade dtb-exynosUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade dtb-alteraUpgrade dtb-sprd | May 6, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-4.15.0-1167-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-4.15.0-230-genericUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-4.15.0-1174-awsUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-4.15.0-230-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1126-awsUpgrade linux-image-oem-osp1Upgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-intelUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1182-azureUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-186-genericUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-4.15.0-1157-kvmUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-4.15.0-1136-oracleUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-oem | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub