In the Linux kernel, the following vulnerability has been resolved:
ACPI: custom_method: fix potential use-after-free issue
In cm_write(), buf is always freed when reaching the end of the function. If the requested count is less than table.length, the allocated buffer will be freed but subsequent calls to cm_write() will still try to access it.
Remove the unconditional kfree(buf) at the end of the function and set the buf to NULL in the -EINVAL error path to match the rest of function.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 27, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-preempt-develUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-default-baseUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-azureUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-default-develUpgrade kernel-default-manUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-syms-azure | Aug 9, 2024 | Feb 27, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-4.4.0-253-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1130-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1168-awsUpgrade linux-image-genericUpgrade linux-image-4.4.0-1131-kvmUpgrade linux-image-4.4.0-253-generic | Apr 22, 2024 | Feb 27, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub