In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle()
Need to call rxrpc_put_peer() for bundle candidate before kfree() as it holds a ref to rxrpc_peer.
[DH: v2: Changed to abstract out the bundle freeing code into a function]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.93-87.444Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel | May 22, 2025 | May 24, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2024 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-devel | Aug 9, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub