In the Linux kernel, the following vulnerability has been resolved:
i40e: Fix use-after-free in i40e_client_subtask()
Currently the call to i40e_client_del_instance frees the object pf->cinst, however pf->cinst->lan_info is being accessed after the free. Fix this by adding the missing return.
Addresses-Coverity: ("Read from pointer after free")
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfo | Dec 12, 2024 | Feb 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-default-manUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-preemptUpgrade kernel-64kbUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-preempt-devel | Aug 9, 2024 | Feb 28, 2024 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-bluefieldUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-oracle-5.4Upgrade linux-gcp-fipsUpgrade linux-gcp-5.4Upgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-oracleUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linuxUpgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linux-aws | Nov 19, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub