In the Linux kernel, the following vulnerability has been resolved:
fbdev: Fix invalid page access after closing deferred I/O devices
When a fbdev with deferred I/O is once opened and closed, the dirty pages still remain queued in the pageref list, and eventually later those may be processed in the delayed work. This may lead to a corruption of pages, hitting an Oops.
This patch makes sure to cancel the delayed work and clean up the pageref list at closing the device for addressing the bug. A part of the cleanup code is factored out as a new helper function that is called from the common fb_release().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.15-28.43Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel | Jun 11, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade dtb-socionextUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-develUpgrade kernel-syms-rtUpgrade cluster-md-kmp-default | Jun 13, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub