In the Linux kernel, the following vulnerability has been resolved:
net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
In emac_mac_tx_buf_send, it calls emac_tx_fill_tpd(..,skb,..). If some error happens in emac_tx_fill_tpd(), the skb will be freed via dev_kfree_skb(skb) in error branch of emac_tx_fill_tpd(). But the freed skb is still used via skb->len by netdev_sent_queue(,skb->len).
As i observed that emac_tx_fill_tpd() haven't modified the value of skb->len, thus my patch assigns skb->len to 'len' before the possible free and use 'len' instead of skb->len later.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel | Jun 6, 2024 | Feb 28, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.238-182.421Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf | May 28, 2024 | Feb 28, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 28, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | May 13, 2024 | Feb 28, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libs | Jul 23, 2024 | Feb 28, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Feb 28, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Feb 28, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 30, 2024 | Feb 28, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-devel | Jun 17, 2024 | Feb 28, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-default-manUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-default-devel | Aug 9, 2024 | Feb 28, 2024 |
| Ubuntu | — | Upgrade linux-gcp-4.15Upgrade linux-raspiUpgrade linux-kvmUpgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-hweUpgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-azure-4.15Upgrade linux-azure-fipsUpgrade linuxUpgrade linux-gcpUpgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-aws-hwe | Nov 19, 2024 | Feb 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub