In the Linux kernel, the following vulnerability has been resolved:
x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
The code calling ima_free_kexec_buffer() runs long after the memblock allocator has already been torn down, potentially resulting in a use after free in memblock_isolate_range().
With KASAN or KFENCE, this use after free will result in a BUG from the idle task, and a subsequent kernel panic.
Switch ima_free_kexec_buffer() over to memblock_free_late() to avoid that bug.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade perfUpgrade bpftool-debuginfo | Feb 17, 2025 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-alteraUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-64kbUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-devel-azureUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-exynos | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | Mar 2, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub