In the Linux kernel, the following vulnerability has been resolved:
can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
It will trigger UAF for rx_kref of j1939_priv as following.
cpu0 cpu1 j1939_sk_bind(socket0, ndev0, ...) j1939_netdev_start j1939_sk_bind(socket1, ndev0, ...) j1939_netdev_start j1939_priv_set j1939_priv_get_by_ndev_locked j1939_jsk_add ..... j1939_netdev_stop kref_put_lock(&priv->rx_kref, ...) kref_get(&priv->rx_kref, ...) REFCOUNT_WARN("addition on 0;...")
==================================================== refcount_t: addition on 0; use-after-free. WARNING: CPU: 1 PID: 20874 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0 RIP: 0010:refcount_warn_saturate+0x169/0x1e0 Call Trace: j1939_netdev_start+0x68b/0x920 j1939_sk_bind+0x426/0xeb0 ? security_socket_bind+0x83/0xb0
The rx_kref's kref_get() and kref_put() should use j1939_netdev_lock to protect.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-64kUpgrade kernelUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade rvUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virt | Nov 4, 2024 | May 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.82-83.359Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-devel | Feb 3, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 25, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade rvUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-kvmUpgrade rtlaUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-debug-uki-virtUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade libperf-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-debuginfoUpgrade perf | Aug 1, 2024 | May 22, 2024 |
| Suse | — | Upgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade dlm-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade kernel-default-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade dtb-amazonUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinner | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-gcp-5.4Upgrade linux-azureUpgrade linux-raspi-5.4Upgrade linuxUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-hwe-5.4Upgrade linux-ibmUpgrade linux-kvmUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linux-oracleUpgrade linux-gkeop | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub