In the Linux kernel, the following vulnerability has been resolved:
fbdev: Fix invalid page access after closing deferred I/O devices
When a fbdev with deferred I/O is once opened and closed, the dirty pages still remain queued in the pageref list, and eventually later those may be processed in the delayed work. This may lead to a corruption of pages, hitting an Oops.
This patch makes sure to cancel the delayed work and clean up the pageref list at closing the device for addressing the bug. A part of the cleanup code is factored out as a new helper function that is called from the common fb_release().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.15-28.43Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Jun 11, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | May 21, 2024 |
| Suse | — | Upgrade kselftests-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-default-develUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-appleUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-develUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade dtb-armUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-rockchipUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug | Jun 13, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub