In the Linux kernel, the following vulnerability has been resolved:
platform/x86: wmi: Fix opening of char device
Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices().
Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-64k-develUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-64kUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-headersUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-64k-debug-modulesUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-devel-matchedUpgrade kernel-rt-develUpgrade libperfUpgrade kernel-zfcpdump-devel-matched | Aug 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.66-91.160 | Jun 11, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade perf-debuginfoUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade rvUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-rt-modules-core | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-azure-extraUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-default-manUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade kernel-azure-baseUpgrade reiserfs-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-azure-vdsoUpgrade dtb-amazonUpgrade dtb-apmUpgrade dtb-appleUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade dtb-armUpgrade kernel-rtUpgrade dtb-qcomUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-mediatek | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-nvidia-tegraUpgrade linux-awsUpgrade linux-fipsUpgrade linux-azure-fdeUpgrade linux-nvidia-tegra-5.15Upgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-riscv-5.15Upgrade linux-lowlatencyUpgrade linux-aws-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linuxUpgrade linux-raspi-5.4Upgrade linux-gkeUpgrade linux-ibm-5.15Upgrade linux-oracle-5.4Upgrade linux-ibm-5.4Upgrade linux-realtimeUpgrade linux-aws-5.15Upgrade linux-gkeopUpgrade linux-gcpUpgrade linux-xilinx-zynqmpUpgrade linux-gcp-5.4Upgrade linux-intel-iotgUpgrade linux-kvmUpgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-gcp-5.15Upgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-azure-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-gkeop-5.15Upgrade linux-azure-5.4Upgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-azureUpgrade linux-nvidia-6.5Upgrade linux-hwe-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-iot | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub