In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix a user-after-free in add_pble_prm
When irdma_hmc_sd_one fails, 'chunk' is freed while its still on the PBLE info list.
Add the chunk entry to the PBLE info list only after successful setting of the SD in irdma_hmc_sd_one.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-rt-develUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-syms-azure | Aug 9, 2024 | Jun 19, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub