In the Linux kernel, the following vulnerability has been resolved:
can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
It will trigger UAF for rx_kref of j1939_priv as following.
cpu0 cpu1 j1939_sk_bind(socket0, ndev0, ...) j1939_netdev_start j1939_sk_bind(socket1, ndev0, ...) j1939_netdev_start j1939_priv_set j1939_priv_get_by_ndev_locked j1939_jsk_add ..... j1939_netdev_stop kref_put_lock(&priv->rx_kref, ...) kref_get(&priv->rx_kref, ...) REFCOUNT_WARN("addition on 0;...")
==================================================== refcount_t: addition on 0; use-after-free. WARNING: CPU: 1 PID: 20874 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0 RIP: 0010:refcount_warn_saturate+0x169/0x1e0 Call Trace: j1939_netdev_start+0x68b/0x920 j1939_sk_bind+0x426/0xeb0 ? security_socket_bind+0x83/0xb0
The rx_kref's kref_get() and kref_put() should use j1939_netdev_lock to protect.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-devel-matchedUpgrade python3-perfUpgrade bpftoolUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-coreUpgrade kernel-64kUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-develUpgrade libperfUpgrade perfUpgrade kernel-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade rvUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade rtlaUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-64k-develUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-64k-debugUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-doc | Nov 4, 2024 | May 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perfUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 3, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 25, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade libperf-debuginfoUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-rt-debug-debuginfo | Aug 1, 2024 | May 22, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade dtb-armUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-develUpgrade dtb-amazonUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade dtb-hisiliconUpgrade kernel-rt-extraUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-renesas | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-hwe-5.4Upgrade linux-azureUpgrade linuxUpgrade linux-gcpUpgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-gcp-5.4Upgrade linux-fipsUpgrade linux-gkeopUpgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-raspiUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-oracle-5.4 | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub