In the Linux kernel, the following vulnerability has been resolved:
can: pch_can: pch_can_rx_normal: fix use after free
After calling netif_receive_skb(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is dereferenced just after the call netif_receive_skb(skb).
Reordering the lines solves the issue.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Dec 19, 2024 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade dtb-marvellUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-develUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade dtb-caviumUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade dtb-renesas | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-ibm-5.4Upgrade linuxUpgrade linux-hweUpgrade linux-gcp-5.4Upgrade linux-aws-fipsUpgrade linux-gcp-4.15Upgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-azure-4.15Upgrade linux-aws-hweUpgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-raspiUpgrade linux-awsUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-raspi-5.4Upgrade linux-oracle-5.4Upgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-bluefield | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub