In the Linux kernel, the following vulnerability has been resolved:
platform/x86: wmi: Fix opening of char device
Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices().
Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade perfUpgrade bpftoolUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade python3-perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-uki-virtUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libs-develUpgrade kernel-64k-modules-extraUpgrade rtlaUpgrade kernel-docUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade rvUpgrade kernel-64k-debugUpgrade kernel-64kUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-modulesUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-64k-coreUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-64k-develUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules | Aug 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perf-debuginfo | Jun 11, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-rt-debuginfoUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade libperf-debuginfoUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade perf-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-uki-virtUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade rvUpgrade kernelUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfo | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-source-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-default-develUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-default-manUpgrade dtb-broadcomUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-lgUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azure | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-lowlatencyUpgrade linux-nvidia-tegra-5.15Upgrade linux-fipsUpgrade linuxUpgrade linux-bluefieldUpgrade linux-lowlatency-hwe-5.15Upgrade linux-oracle-5.4Upgrade linux-gkeUpgrade linux-nvidia-tegraUpgrade linux-ibm-5.15Upgrade linux-raspi-5.4Upgrade linux-raspiUpgrade linux-aws-5.15Upgrade linux-azure-fdeUpgrade linux-awsUpgrade linux-realtimeUpgrade linux-ibm-5.4Upgrade linux-riscv-5.15Upgrade linux-aws-5.4Upgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-azure-5.15Upgrade linux-kvmUpgrade linux-azure-5.4Upgrade linux-nvidia-6.5Upgrade linux-intel-iotg-5.15Upgrade linux-iotUpgrade linux-gkeopUpgrade linux-xilinx-zynqmpUpgrade linux-oracleUpgrade linux-intel-iotgUpgrade linux-oracle-5.15Upgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-intel-iot-realtimeUpgrade linux-gcp-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-gcpUpgrade linux-nvidiaUpgrade linux-hwe-5.15Upgrade linux-gkeop-5.15 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub