In the Linux kernel, the following vulnerability has been resolved:
net: usb: fix possible use-after-free in smsc75xx_bind
The commit 46a8b29c6306 ("net: usb: fix memory leak in smsc75xx_bind") fails to clean up the work scheduled in smsc75xx_reset-> smsc75xx_set_multicast, which leads to use-after-free if the work is scheduled to start after the deallocation. In addition, this patch also removes a dangling pointer - dev->data[0].
This patch calls cancel_work_sync to cancel the scheduled work and set the dangling pointer to NULL.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-sourceUpgrade kernel-azure-baseUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-devel-azure | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linuxUpgrade linux-raspiUpgrade linux-gcpUpgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-gcp-fipsUpgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-azure-4.15Upgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-aws-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub