In the Linux kernel, the following vulnerability has been resolved:
gve: Add NULL pointer checks when freeing irqs.
When freeing notification blocks, we index priv->msix_vectors. If we failed to allocate priv->msix_vectors (see abort_with_msix_vectors) this could lead to a NULL pointer dereference if the driver is unloaded.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-zfcpdumpUpgrade kernel-azure-baseUpgrade kernel-azureUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-source | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-raspi-5.4Upgrade linux-oracleUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-aws-fips | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub