In the Linux kernel, the following vulnerability has been resolved:
spmi: mediatek: Fix UAF on device remove
The pmif driver data that contains the clocks is allocated along with spmi_controller. On device remove, spmi_controller will be freed first, and then devres , including the clocks, will be cleanup. This leads to UAF because putting the clocks will access the clocks in the pmif driver data, which is already freed along with spmi_controller.
This can be reproduced by enabling DEBUG_TEST_DRIVER_REMOVE and building the kernel with KASAN.
Fix the UAF issue by using unmanaged clk_bulk_get() and putting the clocks before freeing spmi_controller.
CVSS Details
- CVSS 3.1 Base Score: 3.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-laptop-23.10Upgrade linux-image-azure-fde | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub