In the Linux kernel, the following vulnerability has been resolved:
i40e: Fix use-after-free in i40e_client_subtask()
Currently the call to i40e_client_del_instance frees the object pf->cinst, however pf->cinst->lan_info is being accessed after the free. Fix this by adding the missing return.
Addresses-Coverity: ("Read from pointer after free")
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfo | Dec 12, 2024 | Feb 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-azure | Aug 9, 2024 | Feb 28, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-kvmUpgrade linux-aws-5.4Upgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-raspiUpgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linux-oracle-5.4 | Nov 19, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub