In the Linux kernel, the following vulnerability has been resolved:
spi: fix use-after-free of the add_lock mutex
Commit 6098475d4cb4 ("spi: Fix deadlock when adding SPI controllers on SPI buses") introduced a per-controller mutex. But mutex_unlock() of said lock is called after the controller is already freed:
spi_unregister_controller(ctlr) -> put_device(&ctlr->dev) -> spi_controller_release(dev) -> mutex_unlock(&ctrl->add_lock)
Move the put_device() after the mutex_unlock().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-default-develUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-symsUpgrade dtb-amdUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-64kbUpgrade kernel-docsUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade kernel-rtUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-lgUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade kernel-sourceUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-syms-azure | Aug 9, 2024 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub