In the Linux kernel, the following vulnerability has been resolved:
net: macb: fix use after free on rmmod
plat_dev->dev->platform_data is released by platform_device_unregister(), use of pclk and hclk is a use-after-free. Since device unregister won't need a clk device we adjust the function call sequence to fix this issue.
[ 31.261225] BUG: KASAN: use-after-free in macb_remove+0x77/0xc6 [macb_pci] [ 31.275563] Freed by task 306: [ 30.276782] platform_device_release+0x25/0x80
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-rtUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-default-manUpgrade kernel-azureUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade dtb-caviumUpgrade dtb-qcomUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-exynosUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-preemptUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-preempt-develUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade dtb-alteraUpgrade dtb-nvidia | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-aws-hweUpgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-gkeopUpgrade linux-gcp-4.15Upgrade linux-hwe-5.4Upgrade linux-azure-4.15Upgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-gcp-5.4Upgrade linux-hweUpgrade linuxUpgrade linux-ibmUpgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-azure-fde-5.15Upgrade linux-gcp | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub