In the Linux kernel, the following vulnerability has been resolved:
ALSA: usx2y: Don't call free_pages_exact() with NULL address
Unlike some other functions, we can't pass NULL pointer to free_pages_exact(). Add a proper NULL check for avoiding possible Oops.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-obs-build | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linuxUpgrade linux-oracle-5.4Upgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-gkeopUpgrade linux-ibmUpgrade linux-aws-fipsUpgrade linux-azureUpgrade linux-oracle | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub