In the Linux kernel, the following vulnerability has been resolved:
net: ti: fix UAF in tlan_remove_one
priv is netdev private data and it cannot be used after free_netdev() call. Using priv after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-core | Jul 3, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 3, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 3, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade bpftoolUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extra | Jul 16, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-azure | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linuxUpgrade linux-oracleUpgrade linux-gcp-4.15Upgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-azure-4.15Upgrade linux-kvmUpgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-ibmUpgrade linux-bluefieldUpgrade linux-aws-hweUpgrade linux-hweUpgrade linux-azure-5.4Upgrade linux-aws | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub