In the Linux kernel, the following vulnerability has been resolved:
net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change()
The issue happens on some error handling paths. When the function fails to grab the object `xprt`, it simply returns 0, forgetting to decrease the reference count of another object `xps`, which is increased by rpc_sysfs_xprt_kobj_get_xprt_switch(), causing refcount leaks. Also, the function forgets to check whether `xps` is valid before using it, which may result in NULL-dereferencing issues.
Fix it by adding proper error handling code when either `xprt` or `xps` is NULL.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.69-37.134Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Jun 20, 2025 | Jun 20, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Ubuntu | — | Upgrade linux-azureUpgrade linux-raspiUpgrade linux-intel-iotg-5.15Upgrade linux-ibmUpgrade linux-hwe-5.15Upgrade linux-azure-fdeUpgrade linux-awsUpgrade linuxUpgrade linux-nvidiaUpgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-lowlatency-hwe-5.15Upgrade linux-oracleUpgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-realtimeUpgrade linux-kvmUpgrade linux-gcp-5.15 | Jun 26, 2025 | Jun 18, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub