In the Linux kernel, the following vulnerability has been resolved:
net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..). If some error happens in emac_tx_fill_tpd(), the skb will be freed via dev_kfree_skb(skb) in error branch of emac_tx_fill_tpd(). But the freed skb is still used via skb->len by netdev_sent_queue(,skb->len).
As i observed that emac_tx_fill_tpd() haven't modified the value of skb->len, thus my patch assigns skb->len to 'len' before the possible free and use 'len' instead of skb->len later.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade python3-perf | Jun 6, 2024 | Feb 28, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | May 28, 2024 | Feb 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | May 13, 2024 | Feb 28, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftool | Jul 23, 2024 | Feb 28, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Feb 28, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Feb 28, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 30, 2024 | Feb 28, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernelUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade perf | Jun 17, 2024 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-preempt-develUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-azure | Aug 9, 2024 | Feb 28, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-raspiUpgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-awsUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-oracle-5.4Upgrade linux-azure-fipsUpgrade linuxUpgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-aws-hweUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-gcp-5.4Upgrade linux-raspi-5.4 | Nov 19, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub