In the Linux kernel, the following vulnerability has been resolved:
iio: mma8452: Fix trigger reference couting
The mma8452 driver directly assigns a trigger to the struct iio_dev. The IIO core when done using this trigger will call `iio_trigger_put()` to drop the reference count by 1.
Without the matching `iio_trigger_get()` in the driver the reference count can reach 0 too early, the trigger gets freed while still in use and a use-after-free occurs.
Fix this by getting a reference to the trigger before assigning it to the IIO device.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade dtb-exynosUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dtb-amazonUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-qcomUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-preemptUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade kernel-source-vanillaUpgrade kernel-debugUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-preempt-develUpgrade kernel-develUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-devel | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-4.4.0-268-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1143-awsUpgrade linux-image-4.4.0-1144-kvmUpgrade linux-image-4.4.0-1181-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1113-fipsUpgrade linux-image-virtualUpgrade linux-image-4.4.0-268-generic | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub