In the Linux kernel, the following vulnerability has been resolved:
kprobes: Fix possible use-after-free issue on kprobe registration
When unloading a module, its state is changing MODULE_STATE_LIVE -> MODULE_STATE_GOING -> MODULE_STATE_UNFORMED. Each change will take a time. `is_module_text_address()` and `__module_text_address()` works with MODULE_STATE_LIVE and MODULE_STATE_GOING. If we use `is_module_text_address()` and `__module_text_address()` separately, there is a chance that the first one is succeeded but the next one is failed because module->state becomes MODULE_STATE_UNFORMED between those operations.
In `check_kprobe_address_safe()`, if the second `__module_text_address()` is failed, that is ignored because it expected a kernel_text address. But it may have failed simply because module->state has been changed to MODULE_STATE_UNFORMED. In this case, arm_kprobe() will try to modify non-exist module text address (use-after-free).
To fix this problem, we should not use separated `is_module_text_address()` and `__module_text_address()`, but use only `__module_text_address()` once and do `try_module_get(module)` which is only available with MODULE_STATE_LIVE.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.158-103.164Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.348-265.562Upgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.216-204.855Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-headers | Mar 14, 2025 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.87-99.174Upgrade kernelUpgrade kernel-libbpf-static | Mar 27, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade perf | Jan 21, 2025 | May 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2024 |
| Suse | — | Upgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-azure-baseUpgrade kernel-rt-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade kernel-azure-livepatch-develUpgrade kernel-default-manUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade dtb-renesasUpgrade kernel-default-develUpgrade kernel-azureUpgrade dtb-freescaleUpgrade kernel-sourceUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rt | Jun 12, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-228-genericUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-intelUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1172-awsUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-ibm-classicUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-genericUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-nvidiaUpgrade linux-image-4.15.0-1180-azureUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1068-azure | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub