In the Linux kernel, the following vulnerability has been resolved:
mISDN: fix possible use-after-free in HFC_cleanup()
This module's remove path calls del_timer(). However, that function does not wait until the timer handler finishes. This means that the timer handler may still be running after the driver's remove function has finished, which would result in a use-after-free.
Fix by calling del_timer_sync(), which makes sure the timer handler has finished, and unable to re-schedule itself.
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt | Jul 3, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 11, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Mar 18, 2025 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 3, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 3, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-headersUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade python3-perf-debuginfo | Jul 16, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-azure-baseUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-azure | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linuxUpgrade linux-azure-fde-5.15Upgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linux-azure-5.4Upgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-hweUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-aws | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub