In the Linux kernel, the following vulnerability has been resolved:
platform/x86: wmi: Fix opening of char device
Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices().
Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade python3-perfUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade libperfUpgrade perfUpgrade rtlaUpgrade kernel-64k-modules-extraUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-headersUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-64kUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules | Aug 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Jun 11, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade rvUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade perfUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade rtlaUpgrade libperfUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade perf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virt | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-source-azureUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade kernel-azure-baseUpgrade kernel-rt_debugUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kb | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-riscv-5.15Upgrade linux-aws-5.4Upgrade linux-realtimeUpgrade linux-ibm-5.15Upgrade linux-raspi-5.4Upgrade linux-aws-5.15Upgrade linux-oracle-5.4Upgrade linux-azure-fdeUpgrade linux-ibm-5.4Upgrade linux-lowlatencyUpgrade linux-raspiUpgrade linuxUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-nvidia-tegra-5.15Upgrade linux-awsUpgrade linux-fipsUpgrade linux-nvidia-tegraUpgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-nvidia-tegra-igxUpgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-gcp-5.15Upgrade linux-azureUpgrade linux-iotUpgrade linux-azure-5.4Upgrade linux-azure-5.15Upgrade linux-nvidia-6.5Upgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-gkeop-5.15Upgrade linux-kvmUpgrade linux-hwe-5.15Upgrade linux-gkeopUpgrade linux-ibmUpgrade linux-intel-iotgUpgrade linux-gcp-5.4 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub