In the Linux kernel, the following vulnerability has been resolved:
nfc: fix segfault in nfc_genl_dump_devices_done
When kmalloc in nfc_genl_dump_devices() fails then nfc_genl_dump_devices_done() segfaults as below
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] CPU: 0 PID: 25 Comm: kworker/0:1 Not tainted 5.16.0-rc4-01180-g2a987e65025e-dirty #5 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-6.fc35 04/01/2014 Workqueue: events netlink_sock_destruct_work RIP: 0010:klist_iter_exit+0x26/0x80 Call Trace: <TASK> class_dev_iter_exit+0x15/0x20 nfc_genl_dump_devices_done+0x3b/0x50 genl_lock_done+0x84/0xd0 netlink_sock_destruct+0x8f/0x270 __sk_destruct+0x64/0x3b0 sk_destruct+0xa8/0xd0 __sk_free+0x2e8/0x3d0 sk_free+0x51/0x90 netlink_sock_destruct_work+0x1c/0x20 process_one_work+0x411/0x710 worker_thread+0x6fd/0xa80
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-64kb-develUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-preemptUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-sourceUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade kernel-rt-optionalUpgrade kernel-preempt-develUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-syms-rtUpgrade kernel-rt-extra | Aug 9, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-azure-4.15Upgrade linux-gcp-fipsUpgrade linux-raspiUpgrade linux-azure-5.4Upgrade linuxUpgrade linux-awsUpgrade linux-azure-fde-5.15Upgrade linux-azure-fipsUpgrade linux-azureUpgrade linux-hweUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-gcp-4.15Upgrade linux-kvmUpgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-ibm-5.4Upgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-gkeop | Nov 19, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub