In the Linux kernel, the following vulnerability has been resolved:
platform/x86: wmi: Fix opening of char device
Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices().
Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64kUpgrade kernel-64k-coreUpgrade kernel-64k-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernelUpgrade kernel-64k-debugUpgrade kernel-64k-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade rvUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-coreUpgrade perfUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade libperfUpgrade kernel-rt-develUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modulesUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade bpftoolUpgrade kernel-tools-libs-devel | Aug 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.66-91.160Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headers | Jun 11, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade rvUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debug-core | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-azure-baseUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-default-extraUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-sprdUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-debugUpgrade kernel-default-manUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade dtb-apmUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-source-azureUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-devel | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-riscv-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-aws-5.15Upgrade linux-aws-5.4Upgrade linux-realtimeUpgrade linux-raspi-5.4Upgrade linux-ibm-5.4Upgrade linux-bluefieldUpgrade linux-lowlatencyUpgrade linux-lowlatency-hwe-5.15Upgrade linux-raspiUpgrade linux-nvidia-tegraUpgrade linux-awsUpgrade linux-gkeUpgrade linux-ibm-5.15Upgrade linuxUpgrade linux-azure-fdeUpgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-aws-fipsUpgrade linux-gkeop-5.15Upgrade linux-kvmUpgrade linux-oracle-5.15Upgrade linux-gcpUpgrade linux-nvidia-tegra-igxUpgrade linux-nvidiaUpgrade linux-azureUpgrade linux-gcp-5.15Upgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-azure-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-intel-iotgUpgrade linux-hwe-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-iotUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-azure-5.15Upgrade linux-nvidia-6.5 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub