In the Linux kernel, the following vulnerability has been resolved:
ieee802154: ca8210: Fix a potential UAF in ca8210_probe
If of_clk_add_provider() fails in ca8210_register_ext_clock(), it calls clk_unregister() to release priv->clk and returns an error. However, the caller ca8210_probe() then calls ca8210_remove(), where priv->clk is freed again in ca8210_unregister_ext_clock(). In this case, a use-after-free may happen in the second time we call clk_unregister().
Fix this by removing the first clk_unregister(). Also, priv->clk could be an error code on failure of clk_register_fixed_rate(). Use IS_ERR_OR_NULL to catch this case in ca8210_unregister_ext_clock().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade dtb-exynosUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-rt-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-develUpgrade kernel-64kb-develUpgrade dlm-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-64kb-livepatch-devel | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-230-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-4.15.0-1136-oracleUpgrade linux-image-4.15.0-230-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1182-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1157-kvmUpgrade linux-image-oemUpgrade linux-image-4.15.0-1174-awsUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1167-gcpUpgrade linux-image-lowlatency | Oct 17, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub