In the Linux kernel, the following vulnerability has been resolved:
perf: hisi: Fix use-after-free when register pmu fails
When we fail to register the uncore pmu, the pmu context may not been allocated. The error handing will call cpuhp_state_remove_instance() to call uncore pmu offline callback, which migrate the pmu context. Since that's liable to lead to some kind of use-after-free.
Use cpuhp_state_remove_instance_nocalls() instead of cpuhp_state_remove_instance() so that the notifiers don't execute after the PMU device has been failed to register.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-5.15.139-93.147Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfo | Dec 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade bpftool-debuginfo | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Oct 9, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-nvidiaUpgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-gkeopUpgrade linux-gkeop-5.15Upgrade linux-aws-5.15Upgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-oracle-5.15Upgrade linux-xilinx-zynqmpUpgrade linuxUpgrade linux-raspiUpgrade linux-azureUpgrade linux-oracleUpgrade linux-nvidia-tegraUpgrade linux-azure-5.15Upgrade linux-kvmUpgrade linux-riscv-5.15Upgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-intel-iot-realtimeUpgrade linux-ibm-5.15Upgrade linux-nvidia-6.5Upgrade linux-intel-iotg-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotgUpgrade linux-nvidia-tegra-5.15Upgrade linux-azure-fdeUpgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-nvidia-tegra-igxUpgrade linux-fipsUpgrade linux-realtime | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub