In the Linux kernel, the following vulnerability has been resolved:
selinux: fix NULL-pointer dereference when hashtab allocation fails
When the hash table slot array allocation fails in hashtab_init(), h->size is left initialized with a non-zero value, but the h->htable pointer is NULL. This may then cause a NULL pointer dereference, since the policydb code relies on the assumption that even after a failed hashtab_init(), hashtab_map() and hashtab_destroy() can be safely called on it. Yet, these detect an empty hashtab only by looking at the size.
Fix this by making sure that hashtab_init() always leaves behind a valid empty hashtab when the allocation fails.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.82-83.359 | Aug 28, 2024 | Apr 10, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 10, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 10, 2024 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-debugUpgrade dtb-amdUpgrade kernel-default-extraUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade dtb-armUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade dtb-amazonUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-rt-livepatchUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade dtb-xilinxUpgrade dtb-lgUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-socionextUpgrade dtb-caviumUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kb | Aug 9, 2024 | Apr 10, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub