In the Linux kernel, the following vulnerability has been resolved:
perf: hisi: Fix use-after-free when register pmu fails
When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhp_state_remove_instance() to call uncore pmu offline callback, which migrate the pmu context. Since that's liable to lead to some kind of use-after-free.
Use cpuhp_state_remove_instance_nocalls() instead of cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been failed to register.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.139-93.147Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-devel | Dec 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-modules-extra | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Oct 9, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linux-aws-fipsUpgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-lowlatencyUpgrade linux-gkeop-5.15Upgrade linux-gkeUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-nvidia-tegraUpgrade linux-xilinx-zynqmpUpgrade linuxUpgrade linux-nvidia-tegra-5.15Upgrade linux-azure-fdeUpgrade linux-intel-iotg-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-gcp-5.15Upgrade linux-fipsUpgrade linux-intel-iotgUpgrade linux-ibm-5.15Upgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linux-realtimeUpgrade linux-nvidia-6.5Upgrade linux-riscv-5.15Upgrade linux-bluefieldUpgrade linux-kvmUpgrade linux-lowlatency-hwe-5.15 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub