In the Linux kernel, the following vulnerability has been resolved:
gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
The gtp_link_ops operations structure for the subsystem must be registered after registering the gtp_net_ops pernet operations structure.
Syzkaller hit 'general protection fault in gtp_genl_dump_pdp' bug:
[ 1010.702740] gtp: GTP module unloaded [ 1010.715877] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 1010.715888] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1010.715895] CPU: 1 PID: 128616 Comm: a.out Not tainted 6.8.0-rc6-std-def-alt1 #1 [ 1010.715899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-alt1 04/01/2014 [ 1010.715908] RIP: 0010:gtp_newlink+0x4d7/0x9c0 [gtp] [ 1010.715915] Code: 80 3c 02 00 0f 85 41 04 00 00 48 8b bb d8 05 00 00 e8 ed f6 ff ff 48 89 c2 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 4f 04 00 00 4c 89 e2 4c 8b 6d 00 48 b8 00 00 00 [ 1010.715920] RSP: 0018:ffff888020fbf180 EFLAGS: 00010203 [ 1010.715929] RAX: dffffc0000000000 RBX: ffff88800399c000 RCX: 0000000000000000 [ 1010.715933] RDX: 0000000000000001 RSI: ffffffff84805280 RDI: 0000000000000282 [ 1010.715938] RBP: 000000000000000d R08: 0000000000000001 R09: 0000000000000000 [ 1010.715942] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800399cc80 [ 1010.715947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000400 [ 1010.715953] FS: 00007fd1509ab5c0(0000) GS:ffff88805b300000(0000) knlGS:0000000000000000 [ 1010.715958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1010.715962] CR2: 0000000000000000 CR3: 000000001c07a000 CR4: 0000000000750ee0 [ 1010.715968] PKRU: 55555554 [ 1010.715972] Call Trace: [ 1010.715985] ? __die_body.cold+0x1a/0x1f [ 1010.715995] ? die_addr+0x43/0x70 [ 1010.716002] ? exc_general_protection+0x199/0x2f0 [ 1010.716016] ? asm_exc_general_protection+0x1e/0x30 [ 1010.716026] ? gtp_newlink+0x4d7/0x9c0 [gtp] [ 1010.716034] ? gtp_net_exit+0x150/0x150 [gtp] [ 1010.716042] __rtnl_newlink+0x1063/0x1700 [ 1010.716051] ? rtnl_setlink+0x3c0/0x3c0 [ 1010.716063] ? is_bpf_text_address+0xc0/0x1f0 [ 1010.716070] ? kernel_text_address.part.0+0xbb/0xd0 [ 1010.716076] ? __kernel_text_address+0x56/0xa0 [ 1010.716084] ? unwind_get_return_address+0x5a/0xa0 [ 1010.716091] ? create_prof_cpu_mask+0x30/0x30 [ 1010.716098] ? arch_stack_walk+0x9e/0xf0 [ 1010.716106] ? stack_trace_save+0x91/0xd0 [ 1010.716113] ? stack_trace_consume_entry+0x170/0x170 [ 1010.716121] ? __lock_acquire+0x15c5/0x5380 [ 1010.716139] ? mark_held_locks+0x9e/0xe0 [ 1010.716148] ? kmem_cache_alloc_trace+0x35f/0x3c0 [ 1010.716155] ? __rtnl_newlink+0x1700/0x1700 [ 1010.716160] rtnl_newlink+0x69/0xa0 [ 1010.716166] rtnetlink_rcv_msg+0x43b/0xc50 [ 1010.716172] ? rtnl_fdb_dump+0x9f0/0x9f0 [ 1010.716179] ? lock_acquire+0x1fe/0x560 [ 1010.716188] ? netlink_deliver_tap+0x12f/0xd50 [ 1010.716196] netlink_rcv_skb+0x14d/0x440 [ 1010.716202] ? rtnl_fdb_dump+0x9f0/0x9f0 [ 1010.716208] ? netlink_ack+0xab0/0xab0 [ 1010.716213] ? netlink_deliver_tap+0x202/0xd50 [ 1010.716220] ? netlink_deliver_tap+0x218/0xd50 [ 1010.716226] ? __virt_addr_valid+0x30b/0x590 [ 1010.716233] netlink_unicast+0x54b/0x800 [ 1010.716240] ? netlink_attachskb+0x870/0x870 [ 1010.716248] ? __check_object_size+0x2de/0x3b0 [ 1010.716254] netlink_sendmsg+0x938/0xe40 [ 1010.716261] ? netlink_unicast+0x800/0x800 [ 1010.716269] ? __import_iovec+0x292/0x510 [ 1010.716276] ? netlink_unicast+0x800/0x800 [ 1010.716284] __sock_sendmsg+0x159/0x190 [ 1010.716290] ____sys_sendmsg+0x712/0x880 [ 1010.716297] ? sock_write_iter+0x3d0/0x3d0 [ 1010.716304] ? __ia32_sys_recvmmsg+0x270/0x270 [ 1010.716309] ? lock_acquire+0x1fe/0x560 [ 1010.716315] ? drain_array_locked+0x90/0x90 [ 1010.716324] ___sys_sendmsg+0xf8/0x170 [ 1010.716331] ? sendmsg_copy_msghdr+0x170/0x170 [ 1010.716337] ? lockdep_init_map ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.152-100.162Upgrade kernelUpgrade kernel-develUpgrade kernel-livepatch-4.14.343-259.562Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade perf | Aug 19, 2024 | Apr 4, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfo | Feb 17, 2025 | Apr 4, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade dtb-freescaleUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade dtb-appleUpgrade kernel-debugUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-lgUpgrade dtb-alteraUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade kernel-rt-livepatch | May 6, 2024 | Apr 4, 2024 |
| Ubuntu | — | Upgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-intelUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1131-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.4.0-186-lowlatency | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub