In the Linux kernel, the following vulnerability has been resolved:
net: hso: fix NULL-deref on disconnect regression
Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointer dereference on every disconnect instead.
Specifically, the serial device table must no longer be accessed after the minor has been released by hso_serial_tty_unregister().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-livepatch-4.14.232-176.381Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-tools-devel | Mar 19, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | May 13, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel | Jul 23, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-preemptUpgrade kernel-default-baseUpgrade kernel-xen-develUpgrade kernel-azureUpgrade kernel-trace-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-xen-baseUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-preempt-develUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-ec2-baseUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-trace-develUpgrade kernel-devel-azureUpgrade kernel-traceUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-ec2-develUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-xenUpgrade kernel-syms-azureUpgrade kernel-ec2 | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linuxUpgrade linux-aws-fipsUpgrade linux-azure-5.4Upgrade linux-gcp-5.4Upgrade linux-gcp-4.15Upgrade linux-oracleUpgrade linux-hwe-5.4Upgrade linux-aws-hweUpgrade linux-hweUpgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-raspi-5.4Upgrade linux-azure-4.15Upgrade linux-azureUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-raspiUpgrade linux-awsUpgrade linux-aws-5.4 | Nov 19, 2024 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub