In the Linux kernel, the following vulnerability has been resolved:
scsi: pm80xx: Do not call scsi_remove_host() in pm8001_alloc()
Calling scsi_remove_host() before scsi_add_host() results in a crash:
BUG: kernel NULL pointer dereference, address: 0000000000000108 RIP: 0010:device_del+0x63/0x440 Call Trace: device_unregister+0x17/0x60 scsi_remove_host+0xee/0x2a0 pm8001_pci_probe+0x6ef/0x1b90 [pm80xx] local_pci_probe+0x3f/0x90
We cannot call scsi_remove_host() in pm8001_alloc() because scsi_add_host() has not been called yet at that point in time.
Function call tree:
pm8001_pci_probe() | `- pm8001_pci_alloc() | | | `- pm8001_alloc() | | | `- scsi_remove_host() | `- scsi_add_host()
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-source-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-exynosUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-lgUpgrade kernel-macrosUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-preemptUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rt_debugUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade kernel-preempt-develUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade dtb-appleUpgrade dtb-nvidiaUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-debug | Aug 9, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub