In the Linux kernel, the following vulnerability has been resolved:
selinux: fix NULL-pointer dereference when hashtab allocation fails
When the hash table slot array allocation fails in hashtab_init(), h->size is left initialized with a non-zero value, but the h->htable pointer is NULL. This may then cause a NULL pointer dereference, since the policydb code relies on the assumption that even after a failed hashtab_init(), hashtab_map() and hashtab_destroy() can be safely called on it. Yet, these detect an empty hashtab only by looking at the size.
Fix this by making sure that hashtab_init() always leaves behind a valid empty hashtab when the allocation fails.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-devel | Aug 28, 2024 | Apr 10, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-docsUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade dtb-armUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatch-devel | Aug 9, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub