In the Linux kernel, the following vulnerability has been resolved:
staging: greybus: uart: fix tty use after free
User space can hold a tty open indefinitely and tty drivers must not release the underlying structures until the last user is gone.
Switch to using the tty-port reference counter to manage the life time of the greybus tty state to avoid use after free after a disconnect.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dtb-caviumUpgrade kernel-docsUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade dtb-amd | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-gkeopUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-hwe-5.4Upgrade linux-ibmUpgrade linux-aws-hweUpgrade linux-azureUpgrade linux-hweUpgrade linux-azure-fipsUpgrade linux-raspiUpgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-gcp-5.4Upgrade linux-raspi-5.4 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub