In the Linux kernel, the following vulnerability has been resolved:
platform/x86: wmi: Fix opening of char device
Since commit fa1f68db6ca7 ("drivers: misc: pass miscdevice pointer via file private data"), the miscdevice stores a pointer to itself inside filp->private_data, which means that private_data will not be NULL when wmi_char_open() is called. This might cause memory corruption should wmi_char_open() be unable to find its driver, something which can happen when the associated WMI device is deleted in wmi_free_devices().
Fix the problem by using the miscdevice pointer to retrieve the WMI device data associated with a char device using container_of(). This also avoids wmi_char_open() picking a wrong WMI device bound to a driver with the same name as the original driver.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-64k-modulesUpgrade kernel-64k-develUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-64kUpgrade rvUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-kvmUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade bpftoolUpgrade kernel-debug-coreUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade libperfUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-64k-modules-coreUpgrade perfUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-extra | Aug 12, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.66-91.160Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Jun 11, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade rvUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade python3-perfUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-core | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-baseUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-debugUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade kernel-default-manUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade dtb-armUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azure | Jun 12, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-lowlatency-hwe-5.15Upgrade linux-oracle-5.4Upgrade linux-ibm-5.15Upgrade linux-raspiUpgrade linuxUpgrade linux-nvidia-tegraUpgrade linux-aws-5.4Upgrade linux-realtimeUpgrade linux-azure-fdeUpgrade linux-nvidia-tegra-5.15Upgrade linux-fipsUpgrade linux-lowlatencyUpgrade linux-awsUpgrade linux-ibm-5.4Upgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-raspi-5.4Upgrade linux-riscv-5.15Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-azure-fipsUpgrade linux-gcp-5.15Upgrade linux-hwe-5.4Upgrade linux-ibmUpgrade linux-intel-iot-realtimeUpgrade linux-azure-5.4Upgrade linux-azureUpgrade linux-gkeop-5.15Upgrade linux-azure-5.15Upgrade linux-nvidia-6.5Upgrade linux-iotUpgrade linux-xilinx-zynqmpUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-nvidiaUpgrade linux-nvidia-tegra-igxUpgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.15Upgrade linux-gcp-5.4Upgrade linux-oracle-5.15Upgrade linux-gkeopUpgrade linux-aws-fips | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub