In the Linux kernel, the following vulnerability has been resolved:
can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv
It will trigger UAF for rx_kref of j1939_priv as following.
cpu0 cpu1 j1939_sk_bind(socket0, ndev0, ...) j1939_netdev_start j1939_sk_bind(socket1, ndev0, ...) j1939_netdev_start j1939_priv_set j1939_priv_get_by_ndev_locked j1939_jsk_add ..... j1939_netdev_stop kref_put_lock(&priv->rx_kref, ...) kref_get(&priv->rx_kref, ...) REFCOUNT_WARN("addition on 0;...")
==================================================== refcount_t: addition on 0; use-after-free. WARNING: CPU: 1 PID: 20874 at lib/refcount.c:25 refcount_warn_saturate+0x169/0x1e0 RIP: 0010:refcount_warn_saturate+0x169/0x1e0 Call Trace: j1939_netdev_start+0x68b/0x920 j1939_sk_bind+0x426/0xeb0 ? security_socket_bind+0x83/0xb0
The rx_kref's kref_get() and kref_put() should use j1939_netdev_lock to protect.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-coreUpgrade kernel-debugUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-docUpgrade kernel-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade rvUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade kernel-rtUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-coreUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade bpftoolUpgrade kernel-64k-modulesUpgrade kernel | Nov 4, 2024 | May 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.82-83.359 | Feb 3, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 25, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade python3-perfUpgrade perf-debuginfoUpgrade libperf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-rt-debug-develUpgrade libperfUpgrade perfUpgrade kernel-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade rtlaUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-core | Aug 1, 2024 | May 22, 2024 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade kernel-develUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade ocfs2-kmp-defaultUpgrade dtb-amazonUpgrade dtb-lgUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade ocfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azure | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-raspiUpgrade linux-gcpUpgrade linux-awsUpgrade linux-hwe-5.4Upgrade linux-bluefieldUpgrade linux-gcp-5.4Upgrade linuxUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-raspi-5.4 | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub