In the Linux kernel, the following vulnerability has been resolved:
perf: hisi: Fix use-after-free when register pmu fails
When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhp_state_remove_instance() to call uncore pmu offline callback, which migrate the pmu context. Since that's liable to lead to some kind of use-after-free.
Use cpuhp_state_remove_instance_nocalls() instead of cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been failed to register.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.139-93.147Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade kernel-tools | Dec 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.66-91.160 | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Oct 9, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-hwe-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-nvidia-tegraUpgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-azureUpgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linux-aws-fipsUpgrade linuxUpgrade linux-oracleUpgrade linux-ibmUpgrade linux-gkeUpgrade linux-gkeop-5.15Upgrade linux-aws-5.15Upgrade linux-lowlatencyUpgrade linux-raspiUpgrade linux-azure-fdeUpgrade linux-nvidia-tegra-igxUpgrade linux-fipsUpgrade linux-nvidia-6.5Upgrade linux-gcpUpgrade linux-intel-iot-realtimeUpgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotgUpgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.15Upgrade linux-awsUpgrade linux-realtimeUpgrade linux-kvmUpgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-riscv-5.15 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub