In the Linux kernel, the following vulnerability has been resolved:
misc/libmasm/module: Fix two use after free in ibmasm_init_one
In ibmasm_init_one, it calls ibmasm_init_remote_input_dev(). Inside ibmasm_init_remote_input_dev, mouse_dev and keybd_dev are allocated by input_allocate_device(), and assigned to sp->remote.mouse_dev and sp->remote.keybd_dev respectively.
In the err_free_devices error branch of ibmasm_init_one, mouse_dev and keybd_dev are freed by input_free_device(), and return error. Then the execution runs into error_send_message error branch of ibmasm_init_one, where ibmasm_free_remote_input_dev(sp) is called to unregister the freed sp->remote.mouse_dev and sp->remote.keybd_dev.
My patch add a "error_init_remote" label to handle the error of ibmasm_init_remote_input_dev(), to avoid the uaf bugs.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 9, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-source-azureUpgrade kernel-default-manUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-azure-baseUpgrade kernel-macrosUpgrade kernel-preempt-develUpgrade kernel-sourceUpgrade kernel-defaultUpgrade kernel-syms-azureUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-preemptUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-default-extra | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-raspi-5.4Upgrade linuxUpgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-gcp-5.4Upgrade linux-ibmUpgrade linux-azure-fde-5.15Upgrade linux-azure-4.15Upgrade linux-fipsUpgrade linux-hweUpgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-gcp-4.15Upgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-gkeop | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub