In the Linux kernel, the following vulnerability has been resolved:
phylib: fix potential use-after-free
Commit bafbdd527d56 ("phylib: Add device reset GPIO support") added call to phy_device_reset(phydev) after the put_device() call in phy_detach().
The comment before the put_device() call says that the phydev might go away with put_device().
Fix potential use-after-free by calling phy_device_reset() before put_device().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs | Sep 26, 2024 | Jun 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.96-90.460Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfo | Aug 2, 2024 | Jun 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 9, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade python3-perf | Jan 21, 2025 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Jun 20, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 13, 2024 | Jun 20, 2024 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfo | Oct 2, 2024 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade kernel-64kbUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-rt-livepatchUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade kernel-rt_debug-develUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-azure-baseUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade kernel-azure | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-awsUpgrade linux-oracleUpgrade linux-raspiUpgrade linux-ibmUpgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-ibm-5.4Upgrade linuxUpgrade linux-gkeopUpgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-gcp-5.4Upgrade linux-oracle-5.4Upgrade linux-iot | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub