In the Linux kernel, the following vulnerability has been resolved:
net: hso: fix NULL-deref on disconnect regression
Commit 8a12f8836145 ("net: hso: fix null-ptr-deref during tty device unregistration") fixed the racy minor allocation reported by syzbot, but introduced an unconditional NULL-pointer dereference on every disconnect instead.
Specifically, the serial device table must no longer be accessed after the minor has been released by hso_serial_tty_unregister().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.232-176.381Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | Mar 19, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | May 13, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python3-perf | Jul 23, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-traceUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-ec2-develUpgrade kernel-64kbUpgrade kernel-trace-develUpgrade kernel-ec2Upgrade kernel-xenUpgrade kernel-zfcpdumpUpgrade kernel-xen-develUpgrade kernel-default-baseUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-symsUpgrade kernel-develUpgrade kernel-ec2-baseUpgrade kernel-trace-baseUpgrade kernel-64kb-develUpgrade kernel-preemptUpgrade kernel-defaultUpgrade kernel-xen-baseUpgrade kernel-sourceUpgrade kernel-source-azure | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-kvmUpgrade linux-azureUpgrade linux-oracle-5.4Upgrade linux-awsUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-azure-4.15Upgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linuxUpgrade linux-hweUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-oracleUpgrade linux-aws-hwe | Nov 19, 2024 | Feb 26, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub