In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma: Fix a user-after-free in add_pble_prm
When irdma_hmc_sd_one fails, 'chunk' is freed while its still on the PBLE info list.
Add the chunk entry to the PBLE info list only after successful setting of the SD in irdma_hmc_sd_one.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade kernel-azure-extraUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade gfs2-kmp-rt | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub