In the Linux kernel, the following vulnerability has been resolved:
can: sja1000: fix use after free in ems_pcmcia_add_card()
If the last channel is not available then "dev" is freed. Fortunately, we can just use "pdev->irq" instead.
Also we should check if at least one channel was set up.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade kernel-debugUpgrade dtb-appleUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade kernel-default-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-amdUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt-livepatchUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-alteraUpgrade dtb-apmUpgrade kernel-azureUpgrade dlm-kmp-64kb | Aug 9, 2024 | May 24, 2024 |
| Ubuntu | — | Upgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency | Nov 19, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub