The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
misc: fastrpc: avoid double fput() on failed usercopy
If the copy back to userland fails for the FASTRPC_IOCTL_ALLOC_DMA_BUFF ioctl(), we shouldn't assume that 'buf->dmabuf' is still valid. In fact, dma_buf_fd() called fd_install() before, i.e. "consumed" one reference, leaving us with none.
Calling dma_buf_put() will therefore put a reference we no longer own, leading to a valid file descritor table entry for an already released 'file' object which is a straight use-after-free.
Simply avoid calling dma_buf_put() and rely on the process exit code to do the necessary cleanup, if needed, i.e. if the file descriptor is still valid.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Nov 20, 2024 |
| Dell Powerstore Dsa2024497 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Dec 19, 2024 |
| Ubuntu | — | Upgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-azureUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-intel-iotg-5.15Upgrade linux-awsUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-raspi-5.4Upgrade linux-ibm-5.4Upgrade linux-ibmUpgrade linux-iotUpgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linuxUpgrade linux-gcp-fips | Nov 19, 2024 | Jul 16, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jul 16, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub