In the Linux kernel, the following vulnerability has been resolved:
perf: hisi: Fix use-after-free when register pmu fails
When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhp_state_remove_instance() to call uncore pmu offline callback, which migrate the pmu context. Since that's liable to lead to some kind of use-after-free.
Use cpuhp_state_remove_instance_nocalls() instead of cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been failed to register.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-livepatch-5.15.139-93.147Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel | Dec 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.66-91.160Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfo | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 9, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.15Upgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-gkeop-5.15Upgrade linux-aws-5.15Upgrade linux-azureUpgrade linux-gkeopUpgrade linuxUpgrade linux-nvidiaUpgrade linux-aws-fipsUpgrade linux-nvidia-tegraUpgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-gcp-5.15Upgrade linux-azure-fdeUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub