The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
e100: Fix possible use after free in e100_xmit_prepare
In e100_xmit_prepare(), if we can't map the skb, then return -ENOMEM, so e100_xmit_frame() will return NETDEV_TX_BUSY and the upper layer will resend the skb. But the skb is already freed, which will cause UAF bug when the upper layer resends the skb.
Remove the harmful free.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 23, 2024 | Oct 23, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-5.4Upgrade linux-image-gcp-fips-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1151-oracleUpgrade linux-image-aws-4.15Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1153-awsUpgrade linux-image-aws-fips-4.15Upgrade linux-image-gcp-4.15Upgrade linux-image-aws-fipsUpgrade linux-image-4.15.0-1180-gcpUpgrade linux-image-4.4.0-1151-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-5.4Upgrade linux-image-fips-5.4Upgrade linux-image-gcp-fipsUpgrade linux-image-4.15.0-1195-azureUpgrade linux-image-aws-fips-5.4Upgrade linux-image-5.4.0-1156-gcpUpgrade linux-image-4.15.0-1142-fipsUpgrade linux-image-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1136-raspiUpgrade linux-image-4.4.0-276-lowlatencyUpgrade linux-image-5.4.0-224-genericUpgrade linux-image-5.4.0-1140-kvmUpgrade linux-image-ibm-5.4Upgrade linux-image-5.4.0-224-generic-lpaeUpgrade linux-image-raspi-5.4Upgrade linux-image-5.4.0-224-lowlatencyUpgrade linux-image-4.15.0-2125-aws-fipsUpgrade linux-image-5.4.0-1127-fipsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-kvmUpgrade linux-image-gcp-5.4Upgrade linux-image-azureUpgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-5.4.0-1156-azureUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1187-awsUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-raspiUpgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-fipsUpgrade linux-image-4.4.0-1120-fipsUpgrade linux-image-5.4.0-1099-ibmUpgrade linux-image-aws-5.4Upgrade linux-image-4.15.0-2088-gcp-fipsUpgrade linux-image-snapdragon-5.4Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.15.0-1149-oracleUpgrade linux-image-5.4.0-1071-xilinx-zynqmpUpgrade linux-image-4.4.0-1150-awsUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-276-genericUpgrade linux-image-kvm-5.4Upgrade linux-image-generic-lpae-5.4Upgrade linux-image-5.4.0-1156-gcp-fipsUpgrade linux-image-4.15.0-245-genericUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-245-lowlatencyUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-fips-5.4Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-azure-fips-4.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-5.4Upgrade linux-image-virtualUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-5.4Upgrade linux-image-4.15.0-1169-kvmUpgrade linux-image-4.4.0-1188-awsUpgrade linux-image-azure-4.15Upgrade linux-image-oracle-4.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1057-iotUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1153-aws-fipsUpgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-azure-lts-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1157-azure-fipsUpgrade linux-image-raspi2 | Nov 19, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub