In the Linux kernel, the following vulnerability has been resolved:
regmap: set debugfs_name to NULL after it is freed
There is a upstream commit cffa4b2122f5("regmap:debugfs: Fix a memory leak when calling regmap_attach_dev") that adds a if condition when create name for debugfs_name. With below function invoking logical, debugfs_name is freed in regmap_debugfs_exit(), but it is not created again because of the if condition introduced by above commit. regmap_reinit_cache() regmap_debugfs_exit() ... regmap_debugfs_init() So, set debugfs_name to NULL after it is freed.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-tools-devel | Aug 2, 2024 | Feb 29, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 29, 2024 |
| Suse | — | Upgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-preempt-develUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-zfcpdumpUpgrade kernel-default-base | Aug 9, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-awsUpgrade linuxUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-gcp-5.4Upgrade linux-raspiUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-gkeopUpgrade linux-kvm | Nov 19, 2024 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub