In the Linux kernel, the following vulnerability has been resolved:
net: hso: fix NULL-deref on disconnect regression
Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointer dereference on every disconnect instead.
Specifically, the serial device table must no longer be accessed after the minor has been released by hso_serial_tty_unregister().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-4.14.232-176.381Upgrade kernel-debuginfo-common-x86_64 | Mar 19, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | May 13, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade bpftool | Jul 23, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-ec2-baseUpgrade kernel-develUpgrade kernel-xen-develUpgrade kernel-sourceUpgrade kernel-trace-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-defaultUpgrade kernel-preemptUpgrade kernel-xenUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-ec2-develUpgrade kernel-64kbUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-traceUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-trace-develUpgrade kernel-ec2Upgrade kernel-default-man | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-aws-hweUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-hweUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linuxUpgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-azure-4.15Upgrade linux-raspiUpgrade linux-gcpUpgrade linux-azureUpgrade linux-kvmUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-bluefieldUpgrade linux-aws-5.4 | Nov 19, 2024 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub