In the Linux kernel, the following vulnerability has been resolved:
media: bttv: fix use after free error due to btv->timeout timer
There may be some a race condition between timer function bttv_irq_timeout and bttv_remove. The timer is setup in probe and there is no timer_delete operation in remove function. When it hit kfree btv, the function might still be invoked, which will cause use after free bug.
This bug is found by static analysis, it may be false positive.
Fix it by adding del_timer_sync invoking to the remove function.
cpu0 cpu1 bttv_probe ->timer_setup ->bttv_set_dma ->mod_timer; bttv_remove ->kfree(btv); ->bttv_irq_timeout ->USE btv
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-coreUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extra | Aug 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade bpftoolUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-freescaleUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade dtb-amazonUpgrade dtb-apmUpgrade kernel-default-extraUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-64kbUpgrade kernel-source-rtUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade dlm-kmp-azureUpgrade dtb-hisilicon | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linux-aws-5.15Upgrade linux-nvidia-tegraUpgrade linux-nvidia-tegra-igxUpgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linuxUpgrade linux-oracle-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-ibm-5.15Upgrade linux-awsUpgrade linux-ibm-5.4Upgrade linux-gkeUpgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-intel-iotg-5.15Upgrade linux-oracle-5.15Upgrade linux-raspi-5.4Upgrade linux-riscv-5.15Upgrade linux-azureUpgrade linux-realtimeUpgrade linux-lowlatencyUpgrade linux-xilinx-zynqmpUpgrade linux-gkeop-5.15Upgrade linux-azure-fdeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-fipsUpgrade linux-azure-5.4Upgrade linux-nvidiaUpgrade linux-iotUpgrade linux-raspiUpgrade linux-azure-5.15Upgrade linux-nvidia-6.5Upgrade linux-intel-iotgUpgrade linux-gcp-fipsUpgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-gcp-5.15Upgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-bluefieldUpgrade linux-kvm | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub