In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix possible use-after-free in HFC_cleanup()
This module's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free.
Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-headers | Jul 3, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 11, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Mar 18, 2025 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 3, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 3, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade bpftool-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extra | Jul 16, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade kernel-azure-baseUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-obs-build | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-kvmUpgrade linux-raspiUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-raspi-5.4Upgrade linux-aws-hweUpgrade linux-gkeopUpgrade linux-gcp-4.15Upgrade linux-aws-fipsUpgrade linux-azure-5.4Upgrade linux-azure-fde-5.15Upgrade linuxUpgrade linux-gcp-5.4Upgrade linux-azure-4.15Upgrade linux-gcp-fipsUpgrade linux-hweUpgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-oracle | Nov 19, 2024 | May 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub