In the Linux kernel, the following vulnerability has been resolved:
ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
In enic_hard_start_xmit, it calls enic_queue_wq_skb(). Inside enic_queue_wq_skb, if some error happens, the skb will be freed by dev_kfree_skb(skb). But the freed skb is still used in skb_tx_timestamp(skb).
My patch makes enic_queue_wq_skb() return error and goto spin_unlock() incase of error. The solution is provided by Govind. See https://lkml.org/lkml/2021/4/30/961.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jul 16, 2024 | Feb 28, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Feb 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-preempt-develUpgrade kernel-default-develUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade kernel-default-baseUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-default | Aug 9, 2024 | Feb 28, 2024 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-aws-fipsUpgrade linux-bluefieldUpgrade linux-kvmUpgrade linux-aws-5.4Upgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-gcp-fipsUpgrade linux-raspi-5.4Upgrade linux-oracleUpgrade linux-hwe-5.4Upgrade linuxUpgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-fipsUpgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-aws | Nov 19, 2024 | Feb 28, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub