In the Linux kernel, the following vulnerability has been resolved:
net: hso: fix NULL-deref on disconnect regression
Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointer dereference on every disconnect instead.
Specifically, the serial device table must no longer be accessed after the minor has been released by hso_serial_tty_unregister().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.232-176.381Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | Mar 19, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | May 13, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade python-perf | Jul 23, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-ec2-baseUpgrade kernel-default-baseUpgrade kernel-xen-baseUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-preemptUpgrade kernel-xen-develUpgrade kernel-trace-baseUpgrade kernel-default-extraUpgrade kernel-xenUpgrade kernel-zfcpdumpUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade kernel-ec2Upgrade kernel-traceUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-trace-develUpgrade kernel-default-manUpgrade kernel-syms-azureUpgrade kernel-ec2-develUpgrade kernel-macrosUpgrade kernel-docs | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-azure-4.15Upgrade linux-awsUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-gcp-4.15Upgrade linux-gkeopUpgrade linux-azure-5.4Upgrade linuxUpgrade linux-gcp-5.4Upgrade linux-hweUpgrade linux-aws-fips | Nov 19, 2024 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub