In the Linux kernel, the following vulnerability has been resolved:
e100: Fix possible use after free in e100_xmit_prepare
In e100_xmit_prepare(), if we can't map the skb, then return -ENOMEM, so e100_xmit_frame() will return NETDEV_TX_BUSY and the upper layer will resend the skb. But the skb is already freed, which will cause UAF bug when the upper layer resends the skb.
Remove the harmful free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 23, 2024 | Oct 23, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-4.15Upgrade linux-image-5.4.0-1151-oracleUpgrade linux-image-gcp-fips-5.4Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-raspi-5.4Upgrade linux-image-awsUpgrade linux-image-4.15.0-1180-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-fips-4.15Upgrade linux-image-ibmUpgrade linux-image-5.4.0-224-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.4Upgrade linux-image-kvmUpgrade linux-image-ibm-5.4Upgrade linux-image-4.15.0-1187-awsUpgrade linux-image-5.4.0-224-generic-lpaeUpgrade linux-image-5.4.0-1156-gcpUpgrade linux-image-aws-hweUpgrade linux-image-gcp-4.15Upgrade linux-image-5.4.0-1156-azureUpgrade linux-image-5.4.0-1140-kvmUpgrade linux-image-aws-5.4Upgrade linux-image-4.4.0-276-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-fips-5.4Upgrade linux-image-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-4.15.0-1142-fipsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracle-5.4Upgrade linux-image-lowlatencyUpgrade linux-image-generic-5.4Upgrade linux-image-aws-fipsUpgrade linux-image-4.4.0-1120-fipsUpgrade linux-image-5.4.0-1153-awsUpgrade linux-image-5.4.0-1099-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1127-fipsUpgrade linux-image-4.15.0-1195-azureUpgrade linux-image-4.4.0-1151-kvmUpgrade linux-image-fips-5.4Upgrade linux-image-5.4.0-1136-raspiUpgrade linux-image-gcp-5.4Upgrade linux-image-5.4.0-224-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-2125-aws-fipsUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-generic-lts-xenialUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-2088-gcp-fipsUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-245-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-276-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-5.4Upgrade linux-image-5.4.0-1057-iotUpgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-245-lowlatencyUpgrade linux-image-azure-fips-4.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1149-oracleUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1071-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1157-azure-fipsUpgrade linux-image-generic-lpae-5.4Upgrade linux-image-gcpUpgrade linux-image-azure-4.15Upgrade linux-image-4.4.0-1188-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-4.15.0-1169-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-5.4Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.4.0-1156-gcp-fipsUpgrade linux-image-snapdragon-5.4Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-1150-awsUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-fips-5.4Upgrade linux-image-lowlatency-5.4Upgrade linux-image-oracle-4.15Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.4.0-1153-aws-fipsUpgrade linux-image-kvm-5.4Upgrade linux-image-4.15.0-2104-azure-fipsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04 | Nov 19, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub