In the Linux kernel, the following vulnerability has been resolved:
platform/x86: wmi: Fix opening of char device
Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices().
Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rtlaUpgrade kernel-debug-coreUpgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modules-coreUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-develUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-64kUpgrade rvUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debugUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extra | Aug 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-devel | Jun 11, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade rvUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade bpftoolUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade libperf-debuginfoUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade libperfUpgrade kernel-rt-debug-kvm | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade dtb-apmUpgrade kernel-debugUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade kernel-obs-buildUpgrade dtb-freescaleUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade dlm-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-symsUpgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade gfs2-kmp-rt | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-fipsUpgrade linux-azure-fdeUpgrade linux-realtimeUpgrade linux-lowlatencyUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-ibm-5.4Upgrade linux-raspi-5.4Upgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-nvidia-tegraUpgrade linuxUpgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.15Upgrade linux-aws-5.15Upgrade linux-riscv-5.15Upgrade linux-azure-5.4Upgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-azure-5.15Upgrade linux-nvidia-6.5Upgrade linux-oracle-5.15Upgrade linux-gcpUpgrade linux-nvidiaUpgrade linux-nvidia-tegra-igxUpgrade linux-kvmUpgrade linux-gkeop-5.15Upgrade linux-gkeopUpgrade linux-intel-iotg-5.15Upgrade linux-iotUpgrade linux-intel-iotgUpgrade linux-gcp-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-gcp-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-hwe-5.15 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub