In the Linux kernel, the following vulnerability has been resolved:
platform/x86: wmi: Fix opening of char device
Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices().
Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rtlaUpgrade kernel-64k-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade libperfUpgrade kernel-64k-debug-modulesUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debugUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modulesUpgrade kernel-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-modules-core | Aug 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64 | Jun 11, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade bpftool-debuginfoUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade rvUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-headersUpgrade libperf-debuginfoUpgrade perfUpgrade python3-perfUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade rtlaUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-uki-virt | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-develUpgrade kernel-azure-baseUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-debugUpgrade dtb-apmUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kernel-default-manUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-sprdUpgrade dtb-freescale | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegraUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-raspi-5.4Upgrade linuxUpgrade linux-bluefieldUpgrade linux-gkeUpgrade linux-azure-fdeUpgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-ibm-5.4Upgrade linux-lowlatencyUpgrade linux-oracle-5.4Upgrade linux-realtimeUpgrade linux-aws-fipsUpgrade linux-hwe-5.15Upgrade linux-gkeop-5.15Upgrade linux-kvmUpgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-azureUpgrade linux-intel-iotg-5.15Upgrade linux-intel-iotgUpgrade linux-iotUpgrade linux-gcp-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-oracle-5.15Upgrade linux-gcp-5.15Upgrade linux-gcp-fipsUpgrade linux-nvidia-6.5Upgrade linux-azure-5.4Upgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-nvidia-tegra-igxUpgrade linux-oracleUpgrade linux-nvidiaUpgrade linux-gcp | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub