In the Linux kernel, the following vulnerability has been resolved:
drbd: use after free in drbd_create_device()
The drbd_destroy_connection() frees the "connection" so use the _safe() iterator to prevent a use after free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.157-139.675Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade python-perfUpgrade kernel-livepatch-4.14.301-224.520Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade bpftool | Jun 23, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-azure-5.15Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-iotUpgrade linux-ibm-5.4Upgrade linux-oracle-5.15Upgrade linux-aws-hweUpgrade linux-azure-4.15Upgrade linux-gkeUpgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-nvidia-tegra-5.15Upgrade linux-azure-fipsUpgrade linux-lowlatencyUpgrade linux-hwe-5.4Upgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-intel-iotgUpgrade linux-lowlatency-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-oracleUpgrade linux-aws-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-kvmUpgrade linux-realtimeUpgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-gcp-5.15Upgrade linux-azure-5.4Upgrade linux-ibmUpgrade linux-intel-iotg-5.15Upgrade linux-fipsUpgrade linux-azureUpgrade linux-nvidiaUpgrade linux-hweUpgrade linux-xilinx-zynqmpUpgrade linux-hwe-5.15 | May 6, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub