In the Linux kernel, the following vulnerability has been resolved:
sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
The original code puts flush_work() before timer_shutdown_sync() in switch_drv_remove(). Although we use flush_work() to stop the worker, it could be rescheduled in switch_timer(). As a result, a use-after-free bug can occur. The details are shown below:
(cpu 0) | (cpu 1) switch_drv_remove() | flush_work() | ... | switch_timer // timer | schedule_work(&psw->work) timer_shutdown_sync() | ... | switch_work_handler // worker kfree(psw) // free | | psw->state = 0 // use
This patch puts timer_shutdown_sync() before flush_work() to mitigate the bugs. As a result, the worker and timer will be stopped safely before the deallocate operations.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Mar 29, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1115-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1180-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1061-raspiUpgrade linux-image-5.15.0-1071-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1051-gkeopUpgrade linux-image-5.4.0-193-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1050-xilinx-zynqmpUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1173-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-193-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1098-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oemUpgrade linux-image-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-119-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-119-generic-64kUpgrade linux-image-5.15.0-1067-gcpUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-genericUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1071-azure-fdeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1068-awsUpgrade linux-image-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-5.15.0-1063-nvidiaUpgrade linux-image-5.4.0-1131-awsUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1066-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-5.4.0-1136-azureUpgrade linux-image-5.15.0-119-lowlatency-64kUpgrade linux-image-5.15.0-1061-ibmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-5.4.0-1078-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1135-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1063-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-119-lowlatencyUpgrade linux-image-5.15.0-1063-nvidia-lowlatencyUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-5.4.0-1119-kvmUpgrade linux-image-5.15.0-1065-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-193-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-228-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1091-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-kvmUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-5.15.0-119-genericUpgrade linux-image-5.15.0-1065-kvmUpgrade linux-image-awsUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1130-oracleUpgrade linux-image-raspi | Aug 22, 2024 | Mar 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub