In the Linux kernel, the following vulnerability has been resolved:
tee: optee: Fix incorrect page free bug
Pointer to the allocated pages (struct page *page) has already progressed towards the end of allocation. It is incorrect to perform __free_pages(page, order) using this pointer as we would free any arbitrary pages. Fix this by stop modifying the page pointer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 4, 2024 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade kernel-debugUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-preemptUpgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-symsUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-default-optionalUpgrade kernel-devel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade dtb-amazonUpgrade kernel-docsUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade gfs2-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-devel | Aug 9, 2024 | Mar 4, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-ibm-5.4Upgrade linux-gcp-5.4Upgrade linuxUpgrade linux-oracleUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-raspiUpgrade linux-ibmUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-azure-5.4 | Nov 19, 2024 | Mar 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub