In the Linux kernel, the following vulnerability has been resolved:
selinux: fix double free of cond_list on error paths
On error path from cond_read_list() and duplicate_policydb_cond_list() the cond_list_destroy() gets called a second time in caller functions, resulting in NULL pointer deref. Fix this by resetting the cond_list_len to 0 in cond_list_destroy(), making subsequent calls a noop.
Also consistently reset the cond_list pointer to NULL after freeing.
[PM: fix line lengths in the description]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.102-99.473Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfo | Aug 2, 2024 | Jun 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-azure-baseUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-default-manUpgrade kernel-rt-extraUpgrade kernel-azure-vdso | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15 | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub