The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
mcb: fix error handling in mcb_alloc_bus()
There are two bugs: 1) If ida_simple_get() fails then this code calls put_device(carrier) but we haven't yet called get_device(carrier) and probably that leads to a use after free. 2) After device_initialize() then we need to use put_device() to release the bus. This will free the internal resources tied to the device and call mcb_free_bus() which will free the rest.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-rtUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-develUpgrade dtb-xilinxUpgrade kernel-debug-livepatch-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-default-manUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade dtb-socionextUpgrade dtb-armUpgrade kernel-docsUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-azure | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-gcp-4.15Upgrade linux-oracleUpgrade linux-ibmUpgrade linux-aws-5.4Upgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-azureUpgrade linuxUpgrade linux-raspiUpgrade linux-gcp-5.4Upgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-raspi-5.4Upgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-fips | Nov 19, 2024 | May 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub