In the Linux kernel, the following vulnerability has been resolved:
i40e: Fix use-after-free in i40e_client_subtask()
Currently the call to i40e_client_del_instance frees the object pf->cinst, however pf->cinst->lan_info is being accessed after the free. Fix this by adding the missing return.
Addresses-Coverity: ("Read from pointer after free")
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-toolsUpgrade python-perf | Dec 12, 2024 | Feb 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-preempt-develUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade kernel-docs | Aug 9, 2024 | Feb 28, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-raspi-5.4Upgrade linux-azure-fipsUpgrade linux-raspiUpgrade linux-awsUpgrade linux-kvmUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-oracleUpgrade linuxUpgrade linux-azure-5.4 | Nov 19, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub