In the Linux kernel, the following vulnerability has been resolved:
regmap: Fix possible double-free in regcache_rbtree_exit()
In regcache_rbtree_insert_to_block(), when 'present' realloc failed, the 'blk' which is supposed to assign to 'rbnode->block' will be freed, so 'rbnode->block' points a freed memory, in the error handling path of regcache_rbtree_init(), 'rbnode->block' will be freed again in regcache_rbtree_exit(), KASAN will report double-free as follows:
BUG: KASAN: double-free or invalid-free in kfree+0xce/0x390 Call Trace: slab_free_freelist_hook+0x10d/0x240 kfree+0xce/0x390 regcache_rbtree_exit+0x15d/0x1a0 regcache_rbtree_init+0x224/0x2c0 regcache_init+0x88d/0x1310 __regmap_init+0x3151/0x4a80 __devm_regmap_init+0x7d/0x100 madera_spi_probe+0x10f/0x333 [madera_spi] spi_probe+0x183/0x210 really_probe+0x285/0xc30
To fix this, moving up the assignment of rbnode->block to immediately after the reallocation has succeeded so that the data structure stays valid even if the second reallocation fails.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-4.14.256-197.484Upgrade kernel-livepatch-5.10.82-83.359 | Feb 3, 2025 | May 22, 2024 |
| Amazon_linux | — | Upgrade kernel | Jan 31, 2025 | Feb 8, 2022 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade kernel-headersUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade perf | Jan 21, 2025 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 22, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 22, 2024 |
| Suse | — | Upgrade dtb-hisiliconUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-symsUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade kernel-default-manUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmallUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade dtb-socionextUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade kernel-preemptUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-develUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-source-rtUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kb | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1112-fipsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-4.4.0-267-lowlatencyUpgrade linux-image-3.13.0-205-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-fipsUpgrade linux-image-4.4.0-1143-kvmUpgrade linux-image-serverUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-205-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lts-trustyUpgrade linux-image-awsUpgrade linux-image-4.4.0-1180-awsUpgrade linux-image-4.4.0-1142-awsUpgrade linux-image-4.4.0-267-genericUpgrade linux-image-genericUpgrade linux-image-lowlatency | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub