In the Linux kernel, the following vulnerability has been resolved:
i40e: Fix use-after-free in i40e_client_subtask()
Currently the call to i40e_client_del_instance frees the object pf->cinst, however pf->cinst->lan_info is being accessed after the free. Fix this by adding the missing return.
Addresses-Coverity: ("Read from pointer after free")
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-devel | Dec 12, 2024 | Feb 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-preemptUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-azure | Aug 9, 2024 | Feb 28, 2024 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-raspi-5.4Upgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-gcp-5.4Upgrade linux-oracleUpgrade linux-azureUpgrade linux-raspiUpgrade linuxUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linux-aws | Nov 19, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub