In the Linux kernel, the following vulnerability has been resolved:
can: peak_pci: peak_pci_remove(): fix UAF
When remove the module peek_pci, referencing 'chan' again after releasing 'dev' will cause UAF.
Fix this by releasing 'dev' later.
The following log reveals it:
[ 35.961814 ] BUG: KASAN: use-after-free in peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.963414 ] Read of size 8 at addr ffff888136998ee8 by task modprobe/5537 [ 35.965513 ] Call Trace: [ 35.965718 ] dump_stack_lvl+0xa8/0xd1 [ 35.966028 ] print_address_description+0x87/0x3b0 [ 35.966420 ] kasan_report+0x172/0x1c0 [ 35.966725 ] ? peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.967137 ] ? trace_irq_enable_rcuidle+0x10/0x170 [ 35.967529 ] ? peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.967945 ] __asan_report_load8_noabort+0x14/0x20 [ 35.968346 ] peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.968752 ] pci_device_remove+0xa9/0x250
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-docUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade bpftool | Jul 3, 2024 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade python-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftool | Jan 21, 2025 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 3, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel | Jul 16, 2024 | May 22, 2024 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kernel-preemptUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-default-manUpgrade kernel-default-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-azure-baseUpgrade dtb-marvellUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rt | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-oracleUpgrade linux-ibmUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-gcp-5.4Upgrade linux-raspi-5.4Upgrade linuxUpgrade linux-hweUpgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-raspiUpgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-gcp-4.15Upgrade linux-azure-5.4Upgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-azure-4.15 | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub