In the Linux kernel, the following vulnerability has been resolved:
regmap: Fix possible double-free in regcache_rbtree_exit()
In regcache_rbtree_insert_to_block(), when 'present' realloc failed, the 'blk' which is supposed to assign to 'rbnode->block' will be freed, so 'rbnode->block' points a freed memory, in the error handling path of regcache_rbtree_init(), 'rbnode->block' will be freed again in regcache_rbtree_exit(), KASAN will report double-free as follows:
BUG: KASAN: double-free or invalid-free in kfree+0xce/0x390 Call Trace: slab_free_freelist_hook+0x10d/0x240 kfree+0xce/0x390 regcache_rbtree_exit+0x15d/0x1a0 regcache_rbtree_init+0x224/0x2c0 regcache_init+0x88d/0x1310 __regmap_init+0x3151/0x4a80 __devm_regmap_init+0x7d/0x100 madera_spi_probe+0x10f/0x333 [madera_spi] spi_probe+0x183/0x210 really_probe+0x285/0xc30
To fix this, moving up the assignment of rbnode->block to immediately after the reallocation has succeeded so that the data structure stays valid even if the second reallocation fails.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-livepatch-4.14.256-197.484Upgrade python-perfUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | Feb 3, 2025 | May 22, 2024 |
| Amazon_linux | — | Upgrade kernel | Jan 31, 2025 | Feb 8, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftool | Jan 21, 2025 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-default-manUpgrade reiserfs-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade dtb-freescaleUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-preemptUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-64kbUpgrade dtb-sprdUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade kernel-azureUpgrade kselftests-kmp-64kb | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-image-fipsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-1180-awsUpgrade linux-image-4.4.0-267-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1143-kvmUpgrade linux-image-kvmUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-205-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-serverUpgrade linux-image-4.4.0-1112-fipsUpgrade linux-image-3.13.0-205-genericUpgrade linux-image-4.4.0-267-genericUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-1142-aws | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub