In the Linux kernel, the following vulnerability has been resolved:
ieee802154: ca8210: Fix a potential UAF in ca8210_probe
If of_clk_add_provider() fails in ca8210_register_ext_clock(), it calls clk_unregister() to release priv->clk and returns an error. However, the caller ca8210_probe() then calls ca8210_remove(), where priv->clk is freed again in ca8210_unregister_ext_clock(). In this case, a use-after-free may happen in the second time we call clk_unregister().
Fix this by removing the first clk_unregister(). Also, priv->clk could be an error code on failure of clk_register_fixed_rate(). Use IS_ERR_OR_NULL to catch this case in ca8210_unregister_ext_clock().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-debugUpgrade dtb-amdUpgrade kernel-source-rtUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade kernel-symsUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade kernel-azure-vdso | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1167-gcpUpgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1157-kvmUpgrade linux-image-4.15.0-1174-awsUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1182-azureUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-4.15.0-230-genericUpgrade linux-image-4.15.0-1136-oracleUpgrade linux-image-virtualUpgrade linux-image-4.15.0-230-lowlatencyUpgrade linux-image-oracle-lts-18.04 | Oct 17, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub