In the Linux kernel, the following vulnerability has been resolved:
fbdev: Fix invalid page access after closing deferred I/O devices
When a fbdev with deferred I/O is once opened and closed, the dirty pages still remain queued in the pageref list, and eventually later those may be processed in the delayed work. This may lead to a corruption of pages, hitting an Oops.
This patch makes sure to cancel the delayed work and clean up the pageref list at closing the device for addressing the bug. A part of the cleanup code is factored out as a new helper function that is called from the common fb_release().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.15-28.43Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo | Jun 11, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | May 21, 2024 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade dtb-lgUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade dtb-appleUpgrade dtb-broadcomUpgrade dtb-qcomUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-armUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default | Jun 13, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub