In the Linux kernel, the following vulnerability has been resolved:
net: ti: fix UAF in tlan_remove_one
priv is netdev private data and it cannot be used after free_netdev() call. Using priv after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade perf | Jul 3, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 3, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 3, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-rt-core | Jul 16, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade kernel-default | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-gcp-4.15Upgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-aws-hweUpgrade linux-azure-4.15Upgrade linux-hweUpgrade linux-awsUpgrade linux-ibmUpgrade linux-kvmUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-oracle-5.4 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub