In the Linux kernel, the following vulnerability has been resolved:
can: peak_pci: peak_pci_remove(): fix UAF
When remove the module peek_pci, referencing 'chan' again after releasing 'dev' will cause UAF.
Fix this by releasing 'dev' later.
The following log reveals it:
[ 35.961814 ] BUG: KASAN: use-after-free in peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.963414 ] Read of size 8 at addr ffff888136998ee8 by task modprobe/5537 [ 35.965513 ] Call Trace: [ 35.965718 ] dump_stack_lvl+0xa8/0xd1 [ 35.966028 ] print_address_description+0x87/0x3b0 [ 35.966420 ] kasan_report+0x172/0x1c0 [ 35.966725 ] ? peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.967137 ] ? trace_irq_enable_rcuidle+0x10/0x170 [ 35.967529 ] ? peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.967945 ] __asan_report_load8_noabort+0x14/0x20 [ 35.968346 ] peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.968752 ] pci_device_remove+0xa9/0x250
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-docUpgrade perfUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-cross-headers | Jul 3, 2024 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade kernel | Jan 21, 2025 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 3, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-headers | Jul 16, 2024 | May 22, 2024 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade dtb-sprdUpgrade kernel-preempt-develUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade dtb-armUpgrade kselftests-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade dtb-caviumUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-default-develUpgrade reiserfs-kmp-azureUpgrade kernel-preemptUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade gfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-macros | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azure-4.15Upgrade linux-azure-fipsUpgrade linux-gcp-4.15Upgrade linux-azure-5.4Upgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-oracle-5.4Upgrade linux-awsUpgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-gkeopUpgrade linux-kvmUpgrade linux-gcpUpgrade linuxUpgrade linux-hwe-5.4Upgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-hweUpgrade linux-gcp-fipsUpgrade linux-raspi | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub