In the Linux kernel, the following vulnerability has been resolved:
can: peak_usb: fix use after free bugs
After calling peak_usb_netif_rx_ni(skb), dereferencing skb is unsafe. Especially, the can_frame cf which aliases skb memory is accessed after the peak_usb_netif_rx_ni().
Reordering the lines solves the issue.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-devel | Aug 12, 2025 | Aug 11, 2025 |
| Debian | — | Upgrade linux | Apr 21, 2025 | Apr 17, 2025 |
| Oracle_linux | — | Upgrade kernel | Aug 13, 2025 | Apr 17, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 9, 2025 | Apr 17, 2025 |
| Rocky_linux | — | Upgrade perfUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-rt-devel | Feb 5, 2026 | Sep 8, 2025 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-azure-fipsUpgrade linux-aws-hweUpgrade linux-oracle-5.4Upgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-hwe-5.4Upgrade linux-gcp-4.15Upgrade linuxUpgrade linux-azure-5.4Upgrade linux-azure-4.15Upgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-hwe | May 6, 2025 | Apr 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub