In the Linux kernel, the following vulnerability has been resolved:
selinux: fix double free of cond_list on error paths
On error path from cond_read_list() and duplicate_policydb_cond_list() the cond_list_destroy() gets called a second time in caller functions, resulting in NULL pointer deref. Fix this by resetting the cond_list_len to 0 in cond_list_destroy(), making subsequent calls a noop.
Also consistently reset the cond_list pointer to NULL after freeing.
[PM: fix line lengths in the description]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.102-99.473Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel | Aug 2, 2024 | Jun 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 20, 2024 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-syms-azureUpgrade dlm-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-manUpgrade kernel-source-rtUpgrade kernel-azureUpgrade kernel-rtUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-azure-baseUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade kernel-symsUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rt | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15 | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub