In the Linux kernel, the following vulnerability has been resolved:
can: peak_pci: peak_pci_remove(): fix UAF
When remove the module peek_pci, referencing 'chan' again after releasing 'dev' will cause UAF.
Fix this by releasing 'dev' later.
The following log reveals it:
[ 35.961814 ] BUG: KASAN: use-after-free in peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.963414 ] Read of size 8 at addr ffff888136998ee8 by task modprobe/5537 [ 35.965513 ] Call Trace: [ 35.965718 ] dump_stack_lvl+0xa8/0xd1 [ 35.966028 ] print_address_description+0x87/0x3b0 [ 35.966420 ] kasan_report+0x172/0x1c0 [ 35.966725 ] ? peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.967137 ] ? trace_irq_enable_rcuidle+0x10/0x170 [ 35.967529 ] ? peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.967945 ] __asan_report_load8_noabort+0x14/0x20 [ 35.968346 ] peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.968752 ] pci_device_remove+0xa9/0x250
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rtUpgrade kernel-abi-stablelists | Jul 3, 2024 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade perfUpgrade kernel-headers | Jan 21, 2025 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 3, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-rtUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade perf-debuginfo | Jul 16, 2024 | May 22, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade dtb-marvellUpgrade dtb-caviumUpgrade kernel-azure-baseUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-rt-develUpgrade dtb-sprdUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-preempt-develUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-source-rtUpgrade dtb-xilinxUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-armUpgrade kernel-debug-vdsoUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade dtb-amdUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-preemptUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-qcomUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade dtb-altera | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azureUpgrade linuxUpgrade linux-aws-5.4Upgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-raspiUpgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-oracleUpgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-bluefieldUpgrade linux-ibmUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-oracle-5.4Upgrade linux-kvmUpgrade linux-gcp-5.4 | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub