In the Linux kernel, the following vulnerability has been resolved:
nbd: fix uaf in nbd_open
Commit 4af5f2e03013 ("nbd: use blk_mq_alloc_disk and blk_cleanup_disk") cleans up disk by blk_cleanup_disk() and it won't set disk->private_data as NULL as before. UAF may be triggered in nbd_open() if someone tries to open nbd device right after nbd_put() since nbd has been free in nbd_dev_remove().
Fix this by implementing ->free_disk and free private data in it.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.178-120.180Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-devel | Mar 14, 2025 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-develUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade bpftool | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-syms-rtUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade dtb-exynosUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-source-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-syms | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub