In the Linux kernel, the following vulnerability has been resolved:
staging: greybus: uart: fix tty use after free
User space can hold a tty open indefinitely and tty drivers must not release the underlying structures until the last user is gone.
Switch to using the tty-port reference counter to manage the life time of the greybus tty state to avoid use after free after a disconnect.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade dtb-armUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade kernel-develUpgrade dtb-hisiliconUpgrade dtb-marvellUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade dtb-renesasUpgrade gfs2-kmp-azureUpgrade dtb-sprd | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-gkeopUpgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-oracleUpgrade linux-gcpUpgrade linux-azureUpgrade linux-azure-4.15Upgrade linux-raspi-5.4Upgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-raspiUpgrade linuxUpgrade linux-awsUpgrade linux-hweUpgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linux-gcp-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub