In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg
Currently, the hns3_remove function firstly uninstall client instance, and then uninstall acceletion engine device. The netdevice is freed in client instance uninstall process, but acceletion engine device uninstall process still use it to trace runtime information. This causes a use after free problem.
So fixes it by check the instance register state to avoid use after free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-headersUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-tools-libsUpgrade kernel-debug-devel-matchedUpgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-rt-debugUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modulesUpgrade perfUpgrade kernel-rt-modules-coreUpgrade kernel-debugUpgrade kernel-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-64k-develUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-tools | Nov 4, 2024 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 16, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-devel-matchedUpgrade perfUpgrade libperfUpgrade kernel-rtUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade rtlaUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-debug-devel | Jul 29, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-preemptUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-64kb-develUpgrade kernel-source-rtUpgrade kernel-preempt-develUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-extra | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub