The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
sh: push-switch: Reorder cleanup operations to avoid use-after-free bug
The original code puts flush_work() before timer_shutdown_sync() in switch_drv_remove(). Although we use flush_work() to stop the worker, it could be rescheduled in switch_timer(). As a result, a use-after-free bug can occur. The details are shown below:
(cpu 0) | (cpu 1) switch_drv_remove() | flush_work() | ... | switch_timer // timer | schedule_work(&psw->work) timer_shutdown_sync() | ... | switch_work_handler // worker kfree(psw) // free | | psw->state = 0 // use
This patch puts timer_shutdown_sync() before flush_work() to mitigate the bugs. As a result, the worker and timer will be stopped safely before the deallocate operations.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Mar 29, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-4.4.0-1135-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1071-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-4.15.0-1180-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1067-gcpUpgrade linux-image-5.4.0-1115-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-119-generic-lpaeUpgrade linux-image-5.15.0-1071-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1068-awsUpgrade linux-image-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-193-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-119-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1051-gkeopUpgrade linux-image-oemUpgrade linux-image-5.4.0-1050-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-1173-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.15.0-1061-raspiUpgrade linux-image-aws-hweUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1098-gkeopUpgrade linux-image-5.4.0-193-generic-lpaeUpgrade linux-image-5.15.0-1066-oracleUpgrade linux-image-4.4.0-258-genericUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-5.15.0-119-lowlatency-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1063-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-5.4.0-1091-bluefieldUpgrade linux-image-awsUpgrade linux-image-5.15.0-119-genericUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1065-kvmUpgrade linux-image-5.4.0-1078-ibmUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1130-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-228-genericUpgrade linux-image-5.15.0-1063-nvidia-lowlatencyUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-5.15.0-119-lowlatencyUpgrade linux-image-5.4.0-1135-gcpUpgrade linux-image-5.15.0-1063-intel-iotgUpgrade linux-image-5.15.0-1061-ibmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-5.4.0-1131-awsUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-193-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1065-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1119-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1136-azure | Aug 22, 2024 | Mar 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 22, 2026 | Mar 29, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub