In the Linux kernel, the following vulnerability has been resolved:
ravb: Fix use-after-free issue in ravb_tx_timeout_work()
The ravb_stop() should call cancel_work_sync(). Otherwise, ravb_tx_timeout_work() is possible to use the freed priv after ravb_remove() was called like below:
CPU0 CPU1 ravb_tx_timeout() ravb_remove() unregister_netdev() free_netdev(ndev) // free priv ravb_tx_timeout_work() // use priv
unregister_netdev() will call .ndo_stop() so that ravb_stop() is called. And, after phy_stop() is called, netif_carrier_off() is also called. So that .ndo_tx_timeout() will not be called after phy_stop().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-azure-baseUpgrade gfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-extraUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade kernel-rt-develUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-preempt-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-develUpgrade kernel-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade kernel-preemptUpgrade kernel-default-manUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatchUpgrade kernel-rt-extra | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-4.15.0-1176-awsUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-4.4.0-1140-kvmUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1184-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-4.4.0-1139-awsUpgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-4.4.0-1177-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oemUpgrade linux-image-4.15.0-232-genericUpgrade linux-image-4.4.0-262-genericUpgrade linux-image-4.4.0-262-lowlatency | Nov 19, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub