In the Linux kernel, the following vulnerability has been resolved:
Input: powermate - fix use-after-free in powermate_config_complete
syzbot has found a use-after-free bug [1] in the powermate driver. This happens when the device is disconnected, which leads to a memory free from the powermate_device struct. When an asynchronous control message completes after the kfree and its callback is invoked, the lock does not exist anymore and hence the bug.
Use usb_kill_urb() on pm->config to cancel any in-progress requests upon device disconnection.
[1] https://syzkaller.appspot.com/bug?extid=0434ac83f907a1dbdd1e
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | May 13, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Jun 3, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jul 17, 2024 | Feb 29, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-traceUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-manUpgrade dtb-apmUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-ec2-baseUpgrade dtb-amlogicUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade kernel-xen-baseUpgrade kernel-ec2-develUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-allwinnerUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade kernel-xen-develUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-xenUpgrade kernel-trace-baseUpgrade kernel-docs-htmlUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-ec2Upgrade dtb-freescaleUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-azure-baseUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-trace-develUpgrade kernel-preempt-develUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-default | Mar 13, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-5.15Upgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-nvidia-tegraUpgrade linux-azureUpgrade linux-azure-fdeUpgrade linux-riscv-5.15Upgrade linux-raspiUpgrade linux-gkeUpgrade linux-aws-5.4Upgrade linux-aws-5.15Upgrade linux-iotUpgrade linux-intel-iotgUpgrade linux-gcpUpgrade linux-hwe-5.15Upgrade linux-gkeop-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-azure-fde-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-nvidiaUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-lowlatencyUpgrade linux-ibm-5.15Upgrade linux-oracle-5.15Upgrade linux-azure-fipsUpgrade linux-nvidia-6.5Upgrade linux-nvidia-tegra-igxUpgrade linuxUpgrade linux-ibmUpgrade linux-oracleUpgrade linux-gcp-5.4Upgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-azure-5.4Upgrade linux-gkeopUpgrade linux-ibm-5.4Upgrade linux-azure-5.15 | Nov 19, 2024 | Feb 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub