In the Linux kernel, the following vulnerability has been resolved:
regmap: set debugfs_name to NULL after it is freed
There is a upstream commit cffa4b2122f5("regmap:debugfs: Fix a memory leak when calling regmap_attach_dev") that adds a if condition when create name for debugfs_name. With below function invoking logical, debugfs_name is freed in regmap_debugfs_exit(), but it is not created again because of the if condition introduced by above commit. regmap_reinit_cache() regmap_debugfs_exit() ... regmap_debugfs_init() So, set debugfs_name to NULL after it is freed.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Aug 2, 2024 | Feb 29, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 29, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade kernel-64kb-develUpgrade kernel-default-baseUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade kernel-docs | Aug 9, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-gcpUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-oracle-5.4Upgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linuxUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-aws | Nov 19, 2024 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub