In the Linux kernel, the following vulnerability has been resolved:
can: peak_pci: peak_pci_remove(): fix UAF
When remove the module peek_pci, referencing 'chan' again after releasing 'dev' will cause UAF.
Fix this by releasing 'dev' later.
The following log reveals it:
[ 35.961814 ] BUG: KASAN: use-after-free in peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.963414 ] Read of size 8 at addr ffff888136998ee8 by task modprobe/5537 [ 35.965513 ] Call Trace: [ 35.965718 ] dump_stack_lvl+0xa8/0xd1 [ 35.966028 ] print_address_description+0x87/0x3b0 [ 35.966420 ] kasan_report+0x172/0x1c0 [ 35.966725 ] ? peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.967137 ] ? trace_irq_enable_rcuidle+0x10/0x170 [ 35.967529 ] ? peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.967945 ] __asan_report_load8_noabort+0x14/0x20 [ 35.968346 ] peak_pci_remove+0x16f/0x270 [peak_pci] [ 35.968752 ] pci_device_remove+0xa9/0x250
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-develUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-rt | Jul 3, 2024 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Jan 21, 2025 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 3, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-kvmUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-modules-extraUpgrade perf-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade python3-perf | Jul 16, 2024 | May 22, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kernel-azure-baseUpgrade kernel-64kb-develUpgrade kernel-rt_debug-develUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-develUpgrade dtb-socionextUpgrade kernel-preempt-develUpgrade kernel-source-vanillaUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade kernel-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-marvellUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-defaultUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade dtb-armUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatchUpgrade dtb-freescaleUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-preemptUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kernel-default-manUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade dtb-alteraUpgrade dtb-exynosUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-azure-optional | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-bluefieldUpgrade linux-oracleUpgrade linux-ibmUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-gcp-5.4Upgrade linux-fipsUpgrade linux-aws-hweUpgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-azure-5.4Upgrade linux-raspiUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linuxUpgrade linux-azure | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub