In the Linux kernel, the following vulnerability has been resolved:
PCI: Fix reset_method_store() memory leak
In reset_method_store(), a string is allocated via kstrndup() and assigned to the local "options". options is then used in with strsep() to find spaces:
while ((name = strsep(&options, " ")) != NULL) {
If there are no remaining spaces, then options is set to NULL by strsep(), so the subsequent kfree(options) doesn't free the memory allocated via kstrndup().
Fix by using a separate tmp_options to iterate with strsep() so options is preserved.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf | Mar 14, 2025 | Dec 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perf | Mar 27, 2025 | Dec 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 29, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-virtualUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-intelUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-raspiUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1086-azureUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-136-generic-64k | Feb 20, 2025 | Dec 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub