In the Linux kernel, the following vulnerability has been resolved:
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
The code calling ima_free_kexec_buffer() runs long after the memblock allocator has already been torn down, potentially resulting in a use after free in memblock_isolate_range().
With KASAN or KFENCE, this use after free will result in a BUG from the idle task, and a subsequent kernel panic.
Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid that bug.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.56-82.125Upgrade kernel | Feb 17, 2025 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-amlogicUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-marvellUpgrade dtb-apmUpgrade dtb-alteraUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-obs-qaUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-optional | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub