In the Linux kernel, the following vulnerability has been resolved:
net: marvell: prestera: fix double free issue on err path
fix error path handling in prestera_bridge_port_join() that cases prestera driver to crash (see below).
Trace: Internal error: Oops: 96000044 [#1] SMP Modules linked in: prestera_pci prestera uio_pdrv_genirq CPU: 1 PID: 881 Comm: ip Not tainted 5.15.0 #1 pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : prestera_bridge_destroy+0x2c/0xb0 [prestera] lr : prestera_bridge_port_join+0x2cc/0x350 [prestera] sp : ffff800011a1b0f0 ... x2 : ffff000109ca6c80 x1 : dead000000000100 x0 : dead000000000122 Call trace: prestera_bridge_destroy+0x2c/0xb0 [prestera] prestera_bridge_port_join+0x2cc/0x350 [prestera] prestera_netdev_port_event.constprop.0+0x3c4/0x450 [prestera] prestera_netdev_event_handler+0xf4/0x110 [prestera] raw_notifier_call_chain+0x54/0x80 call_netdevice_notifiers_info+0x54/0xa0 __netdev_upper_dev_link+0x19c/0x380
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 24, 2024 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade dtb-caviumUpgrade dtb-armUpgrade kernel-source-rtUpgrade kernel-develUpgrade kernel-rt_debugUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade dlm-kmp-azureUpgrade dtb-qcomUpgrade dtb-apmUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade dtb-amazonUpgrade dtb-mediatekUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-freescaleUpgrade kernel-64kb-develUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-64kb-livepatch-devel | Aug 9, 2024 | May 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub