In the Linux kernel, the following vulnerability has been resolved:
gve: Add NULL pointer checks when freeing irqs.
When freeing notification blocks, we index priv->msix_vectors. If we failed to allocate priv->msix_vectors (see abort_with_msix_vectors) this could lead to a NULL pointer dereference if the driver is unloaded.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-preemptUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade reiserfs-kmp-default | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linuxUpgrade linux-gkeopUpgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-azureUpgrade linux-bluefieldUpgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-raspi-5.4Upgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-aws-fips | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub