In the Linux kernel, the following vulnerability has been resolved:
net: hso: fix null-ptr-deref during tty device unregistration
Multiple ttys try to claim the same the minor number causing a double unregistration of the same device. The first unregistration succeeds but the next one results in a null-ptr-deref.
The get_free_serial_index() function returns an available minor number but doesn't assign it immediately. The assignment is done by the caller later. But before this assignment, calls to get_free_serial_index() would return the same minor number.
Fix this by modifying get_free_serial_index to assign the minor number immediately after one is found to be and rename it to obtain_minor() to better reflect what it does. Similary, rename set_serial_by_index() to release_minor() and modify it to free up the minor number of the given hso_serial. Every obtain_minor() should have corresponding release_minor() call.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.232-176.381Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-tools | Mar 19, 2024 | Feb 26, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | May 13, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Jul 23, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jul 17, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-trace-baseUpgrade kernel-xenUpgrade kernel-ec2-develUpgrade kernel-docsUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-ec2Upgrade kernel-trace-develUpgrade kernel-azureUpgrade kernel-default-manUpgrade kernel-preemptUpgrade kernel-64kb-develUpgrade kernel-xen-develUpgrade kernel-preempt-develUpgrade kernel-source-azureUpgrade kernel-ec2-baseUpgrade kernel-develUpgrade kernel-xen-baseUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-traceUpgrade kernel-syms-azure | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-image-serverUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-kvmUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-3.13.0-199-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-3.13.0-199-lowlatency | Aug 22, 2024 | Feb 26, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub