In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
When scpi probe fails, at any point, we need to ensure that the scpi_info is not set and will remain NULL until the probe succeeds. If it is not taken care, then it could result use-after-free as the value is exported via get_scpi_ops() and could refer to a memory allocated via devm_kzalloc() but freed when the probe fails.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rtUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-64kUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64kUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-rt-develUpgrade bpftoolUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-64k-debug-develUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade perfUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extra | Oct 2, 2025 | Sep 29, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.69-37.134Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.144-127.601Upgrade kernelUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Jun 20, 2025 | Jun 20, 2025 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 1, 2025 | Jun 18, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Jun 18, 2025 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvm | Feb 5, 2026 | Oct 6, 2025 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-realtimeUpgrade linux-hwe-5.15Upgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-iotUpgrade linux-aws-fipsUpgrade linux-gcp-5.15Upgrade linux-intel-iotgUpgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-ibm-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.4Upgrade linux-riscv-5.15Upgrade linux-gkeUpgrade linuxUpgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-oracle-5.4 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub