In the Linux kernel, the following vulnerability has been resolved:
mm, slub: fix potential use-after-free in slab_debugfs_fops
When sysfs_slab_add failed, we shouldn't call debugfs_slab_add() for s because s will be freed soon. And slab_debugfs_fops will use s later leading to a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade dtb-freescaleUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-azureUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-docsUpgrade dtb-amdUpgrade kernel-rt-extraUpgrade kernel-debugUpgrade kernel-rt-livepatch-develUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-default-baseUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade kernel-macrosUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade kernel-rt_debug-vdso | Aug 9, 2024 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub