In the Linux kernel, the following vulnerability has been resolved:
moxart: fix potential use-after-free on remove path
It was reported that the mmc host structure could be accessed after it was freed in moxart_remove(), so fix this by saving the base register of the device and using it instead of the pointer dereference.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Feb 26, 2024 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kernel-preempt-develUpgrade kernel-azureUpgrade dtb-caviumUpgrade dtb-qcomUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-preemptUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-azure-baseUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade kernel-devel-rtUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-qa | Aug 9, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-hwe-5.4Upgrade linux-iotUpgrade linux-azure-4.15Upgrade linux-gcp-fipsUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-lts-xenialUpgrade linux-ibm-5.4Upgrade linux-aws-fipsUpgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-kvmUpgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-hweUpgrade linux-fipsUpgrade linux-gcp-4.15Upgrade linux-gcpUpgrade linux-raspi-5.4Upgrade linux-ibmUpgrade linux-azure-5.4Upgrade linux-oracleUpgrade linux-intel-iotg-5.15 | Nov 19, 2024 | Feb 26, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub