In the Linux kernel, the following vulnerability has been resolved:
tee: optee: Fix incorrect page free bug
Pointer to the allocated pages (struct page *page) has already progressed towards the end of allocation. It is incorrect to perform __free_pages(page, order) using this pointer as we would free any arbitrary pages. Fix this by stop modifying the page pointer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 4, 2024 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-default-develUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-rt-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade gfs2-kmp-64kbUpgrade kernel-preemptUpgrade dtb-xilinxUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade dtb-armUpgrade dtb-apm | Aug 9, 2024 | Mar 4, 2024 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-azure-5.4Upgrade linux-raspiUpgrade linux-oracleUpgrade linux-azureUpgrade linux-fipsUpgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-ibm-5.4Upgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux | Nov 19, 2024 | Mar 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub