In the Linux kernel, the following vulnerability has been resolved:
tun: avoid double free in tun_free_netdev
Avoid double free in tun_free_netdev() by moving the dev->tstats and tun->security allocs to a new ndo_init routine (tun_net_init()) that will be called by register_netdevice(). ndo_init is paired with the desctructor (tun_free_netdev()), so if there's an error in register_netdevice() the destructor will handle the frees.
BUG: KASAN: double-free or invalid-free in selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605
CPU: 0 PID: 25750 Comm: syz-executor416 Not tainted 5.16.0-rc2-syzk #1 Hardware name: Red Hat KVM, BIOS Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x89/0xb5 lib/dump_stack.c:106 print_address_description.constprop.9+0x28/0x160 mm/kasan/report.c:247 kasan_report_invalid_free+0x55/0x80 mm/kasan/report.c:372 ____kasan_slab_free mm/kasan/common.c:346 [inline] __kasan_slab_free+0x107/0x120 mm/kasan/common.c:374 kasan_slab_free include/linux/kasan.h:235 [inline] slab_free_hook mm/slub.c:1723 [inline] slab_free_freelist_hook mm/slub.c:1749 [inline] slab_free mm/slub.c:3513 [inline] kfree+0xac/0x2d0 mm/slub.c:4561 selinux_tun_dev_free_security+0x1a/0x20 security/selinux/hooks.c:5605 security_tun_dev_free_security+0x4f/0x90 security/security.c:2342 tun_free_netdev+0xe6/0x150 drivers/net/tun.c:2215 netdev_run_todo+0x4df/0x840 net/core/dev.c:10627 rtnl_unlock+0x13/0x20 net/core/rtnetlink.c:112 __tun_chr_ioctl+0x80c/0x2870 drivers/net/tun.c:3302 tun_chr_ioctl+0x2f/0x40 drivers/net/tun.c:3311 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:874 [inline] __se_sys_ioctl fs/ioctl.c:860 [inline] __x64_sys_ioctl+0x19d/0x220 fs/ioctl.c:860 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3a/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.144-127.601Upgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade perfUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-devel | Aug 2, 2024 | Mar 4, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 4, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | May 13, 2024 | Mar 4, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 3, 2024 | Mar 4, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-headers | Jul 23, 2024 | Mar 4, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Mar 4, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 4, 2024 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-debugUpgrade dtb-xilinxUpgrade kernel-symsUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-preemptUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-source-azureUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-sourceUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade dtb-amdUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-source-rtUpgrade dtb-apmUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall | Aug 9, 2024 | Mar 4, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1184-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-gkeUpgrade linux-image-aws-hweUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-232-genericUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-lts-18.04 | Nov 19, 2024 | Mar 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub