In the Linux kernel, the following vulnerability has been resolved:
regmap: Fix possible double-free in regcache_rbtree_exit()
In regcache_rbtree_insert_to_block(), when 'present' realloc failed, the 'blk' which is supposed to assign to 'rbnode->block' will be freed, so 'rbnode->block' points a freed memory, in the error handling path of regcache_rbtree_init(), 'rbnode->block' will be freed again in regcache_rbtree_exit(), KASAN will report double-free as follows:
BUG: KASAN: double-free or invalid-free in kfree+0xce/0x390 Call Trace: slab_free_freelist_hook+0x10d/0x240 kfree+0xce/0x390 regcache_rbtree_exit+0x15d/0x1a0 regcache_rbtree_init+0x224/0x2c0 regcache_init+0x88d/0x1310 __regmap_init+0x3151/0x4a80 __devm_regmap_init+0x7d/0x100 madera_spi_probe+0x10f/0x333 [madera_spi] spi_probe+0x183/0x210 really_probe+0x285/0xc30
To fix this, moving up the assignment of rbnode->block to immediately after the reallocation has succeeded so that the data structure stays valid even if the second reallocation fails.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-livepatch-4.14.256-197.484Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-devel | Feb 3, 2025 | May 22, 2024 |
| Amazon_linux | — | Upgrade kernel | Jan 31, 2025 | Feb 8, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-devel | Jan 21, 2025 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade dtb-appleUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade dtb-amdUpgrade kernel-defaultUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-renesasUpgrade kernel-macrosUpgrade dtb-armUpgrade kernel-rt_debugUpgrade kernel-azure-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade kernel-preemptUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azureUpgrade ocfs2-kmp-azure | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-267-genericUpgrade linux-image-4.4.0-1142-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1180-awsUpgrade linux-image-4.4.0-1112-fipsUpgrade linux-image-3.13.0-205-lowlatencyUpgrade linux-image-serverUpgrade linux-image-4.4.0-267-lowlatencyUpgrade linux-image-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-fipsUpgrade linux-image-3.13.0-205-genericUpgrade linux-image-4.4.0-1143-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lts-trusty | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub