In the Linux kernel, the following vulnerability has been resolved:
regmap: Fix possible double-free in regcache_rbtree_exit()
In regcache_rbtree_insert_to_block(), when 'present' realloc failed, the 'blk' which is supposed to assign to 'rbnode->block' will be freed, so 'rbnode->block' points a freed memory, in the error handling path of regcache_rbtree_init(), 'rbnode->block' will be freed again in regcache_rbtree_exit(), KASAN will report double-free as follows:
BUG: KASAN: double-free or invalid-free in kfree+0xce/0x390 Call Trace: slab_free_freelist_hook+0x10d/0x240 kfree+0xce/0x390 regcache_rbtree_exit+0x15d/0x1a0 regcache_rbtree_init+0x224/0x2c0 regcache_init+0x88d/0x1310 __regmap_init+0x3151/0x4a80 __devm_regmap_init+0x7d/0x100 madera_spi_probe+0x10f/0x333 [madera_spi] spi_probe+0x183/0x210 really_probe+0x285/0xc30
To fix this, moving up the assignment of rbnode->block to immediately after the reallocation has succeeded so that the data structure stays valid even if the second reallocation fails.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.256-197.484Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perf | Feb 3, 2025 | May 22, 2024 |
| Amazon_linux | — | Upgrade kernel | Jan 31, 2025 | Feb 8, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade python3-perfUpgrade kernel | Jan 21, 2025 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-nvidiaUpgrade dtb-renesasUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-armUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rtUpgrade dtb-amazonUpgrade kernel-preempt-develUpgrade kernel-devel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-preemptUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade kernel-azureUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kernel-debugUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade reiserfs-kmp-azure | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1112-fipsUpgrade linux-image-3.13.0-205-lowlatencyUpgrade linux-image-4.4.0-1143-kvmUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-fipsUpgrade linux-image-awsUpgrade linux-image-4.4.0-267-lowlatencyUpgrade linux-image-4.4.0-1180-awsUpgrade linux-image-3.13.0-205-genericUpgrade linux-image-serverUpgrade linux-image-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1142-awsUpgrade linux-image-4.4.0-267-genericUpgrade linux-image-genericUpgrade linux-image-lowlatency | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub