In the Linux kernel, the following vulnerability has been resolved:
staging: greybus: uart: fix tty use after free
User space can hold a tty open indefinitely and tty drivers must not release the underlying structures until the last user is gone.
Switch to using the tty-port reference counter to manage the life time of the greybus tty state to avoid use after free after a disconnect.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade dtb-xilinxUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-docsUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kernel-azure | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gcp-4.15Upgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-hweUpgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-azure-4.15Upgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-aws-5.4Upgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-gkeopUpgrade linux-ibmUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-aws-hwe | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub