In the Linux kernel, the following vulnerability has been resolved:
phylib: fix potential use-after-free
Commit bafbdd527d56 ("phylib: Add device reset GPIO support") added call to phy_device_reset(phydev) after the put_device() call in phy_detach().
The comment before the put_device() call says that the phydev might go away with put_device().
Fix potential use-after-free by calling phy_device_reset() before put_device().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-core | Sep 26, 2024 | Jun 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perfUpgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.96-90.460 | Aug 2, 2024 | Jun 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Oct 9, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perfUpgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade python3-perf | Jan 21, 2025 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Jun 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 20, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 13, 2024 | Jun 20, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfo | Oct 2, 2024 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-preemptUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-docsUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-preempt-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-base | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linuxUpgrade linux-raspiUpgrade linux-aws-5.4Upgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-ibm-5.4Upgrade linux-iotUpgrade linux-ibmUpgrade linux-awsUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-raspi-5.4 | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub