In the Linux kernel, the following vulnerability has been resolved:
vhost-vdpa: fix use after free in vhost_vdpa_probe()
The put_device() calls vhost_vdpa_release_dev() which calls ida_simple_remove() and frees "v". So this call to ida_simple_remove() is a use after free and a double free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade dtb-hisiliconUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-debugUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade dtb-alteraUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-macrosUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-64kb | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub