In the Linux kernel, the following vulnerability has been resolved:
spmi: mediatek: Fix UAF on device remove
The pmif driver data that contains the clocks is allocated along with spmi_controller. On device remove, spmi_controller will be freed first, and then devres , including the clocks, will be cleanup. This leads to UAF because putting the clocks will access the clocks in the pmif driver data, which is already freed along with spmi_controller.
This can be reproduced by enabling DEBUG_TEST_DRIVER_REMOVE and building the kernel with KASAN.
Fix the UAF issue by using unmanaged clk_bulk_get() and putting the clocks before freeing spmi_controller.
CVSS Details
- CVSS 3.1 Base Score: 3.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04c | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub