In the Linux kernel, the following vulnerability has been resolved:
sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
The original code puts flush_work() before timer_shutdown_sync() in switch_drv_remove(). Although we use flush_work() to stop the worker, it could be rescheduled in switch_timer(). As a result, a use-after-free bug can occur. The details are shown below:
(cpu 0) | (cpu 1) switch_drv_remove() | flush_work() | ... | switch_timer // timer | schedule_work(&psw->work) timer_shutdown_sync() | ... | switch_work_handler // worker kfree(psw) // free | | psw->state = 0 // use
This patch puts timer_shutdown_sync() before flush_work() to mitigate the bugs. As a result, the worker and timer will be stopped safely before the deallocate operations.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Mar 29, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1050-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-5.4.0-1098-gkeopUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1180-azureUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-193-genericUpgrade linux-image-oemUpgrade linux-image-raspi2Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1115-raspiUpgrade linux-image-5.15.0-119-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1071-azure-fdeUpgrade linux-image-5.15.0-1067-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1068-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-generic-lts-xenialUpgrade linux-image-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-5.15.0-1061-raspiUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-193-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-5.15.0-1071-azureUpgrade linux-image-5.15.0-119-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-aws-hweUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1051-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1063-nvidia-lowlatencyUpgrade linux-image-5.15.0-1065-gkeUpgrade linux-image-5.15.0-119-lowlatencyUpgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-5.4.0-1136-azureUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1119-kvmUpgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-5.4.0-1135-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-20.04cUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-5.15.0-1066-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-awsUpgrade linux-image-5.15.0-1065-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1063-nvidiaUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1131-awsUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-5.15.0-119-lowlatency-64kUpgrade linux-image-5.4.0-1130-oracleUpgrade linux-image-5.15.0-1061-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-228-genericUpgrade linux-image-5.4.0-193-lowlatencyUpgrade linux-image-5.15.0-119-genericUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1063-intel-iotgUpgrade linux-image-5.4.0-1091-bluefieldUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1078-ibmUpgrade linux-image-4.4.0-258-lowlatency | Aug 22, 2024 | Mar 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub