In the Linux kernel, the following vulnerability has been resolved:
net: hso: fix null-ptr-deref during tty device unregistration
Multiple ttys try to claim the same the minor number causing a double unregistration of the same device. The first unregistration succeeds but the next one results in a null-ptr-deref.
The get_free_serial_index() function returns an available minor number but doesn't assign it immediately. The assignment is done by the caller later. But before this assignment, calls to get_free_serial_index() would return the same minor number.
Fix this by modifying get_free_serial_index to assign the minor number immediately after one is found to be and rename it to obtain_minor() to better reflect what it does. Similary, rename set_serial_by_index() to release_minor() and modify it to free up the minor number of the given hso_serial. Every obtain_minor() should have corresponding release_minor() call.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-livepatch-4.14.232-176.381Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfo | Mar 19, 2024 | Feb 26, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | May 13, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-develUpgrade bpftool | Jul 23, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade kernel-ec2Upgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-trace-develUpgrade kernel-default-baseUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-trace-baseUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-xenUpgrade kernel-azure-baseUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-preemptUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-xen-baseUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade kernel-traceUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-xen-develUpgrade kernel-ec2-base | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-3.13.0-199-genericUpgrade linux-image-serverUpgrade linux-image-kvmUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-awsUpgrade linux-image-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-3.13.0-199-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1173-aws | Aug 22, 2024 | Feb 26, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub