In the Linux kernel, the following vulnerability has been resolved:
staging: greybus: uart: fix tty use after free
User space can hold a tty open indefinitely and tty drivers must not release the underlying structures until the last user is gone.
Switch to using the tty-port reference counter to manage the life time of the greybus tty state to avoid use after free after a disconnect.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-rt_debugUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade dtb-exynosUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade dtb-qcomUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-azure-develUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade dtb-sprdUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade dtb-broadcomUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-devel | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-gcp-4.15Upgrade linux-azure-fipsUpgrade linux-azureUpgrade linux-gcp-5.4Upgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-raspi-5.4Upgrade linuxUpgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-oracle-5.4Upgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-gkeopUpgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-aws-5.4Upgrade linux-ibmUpgrade linux-hwe-5.4 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub