In the Linux kernel, the following vulnerability has been resolved:
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
The code calling ima_free_kexec_buffer() runs long after the memblock allocator has already been torn down, potentially resulting in a use after free in memblock_isolate_range().
With KASAN or KFENCE, this use after free will result in a BUG from the idle task, and a subsequent kernel panic.
Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid that bug.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade perfUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo | Feb 17, 2025 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade cluster-md-kmp-rtUpgrade dtb-appleUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debugUpgrade reiserfs-kmp-rtUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade dtb-amazonUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dtb-caviumUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azure | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | Mar 2, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub