In the Linux kernel, the following vulnerability has been resolved:
can: bcm: Fix UAF in bcm_proc_show()
BUG: KASAN: slab-use-after-free in bcm_proc_show+0x969/0xa80 Read of size 8 at addr ffff888155846230 by task cat/7862
CPU: 1 PID: 7862 Comm: cat Not tainted 6.5.0-rc1-00153-gc8746099c197 #230 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0xd5/0x150 print_report+0xc1/0x5e0 kasan_report+0xba/0xf0 bcm_proc_show+0x969/0xa80 seq_read_iter+0x4f6/0x1260 seq_read+0x165/0x210 proc_reg_read+0x227/0x300 vfs_read+0x1d5/0x8d0 ksys_read+0x11e/0x240 do_syscall_64+0x35/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd
Allocated by task 7846: kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 __kasan_kmalloc+0x9e/0xa0 bcm_sendmsg+0x264b/0x44e0 sock_sendmsg+0xda/0x180 ____sys_sendmsg+0x735/0x920 ___sys_sendmsg+0x11d/0x1b0 __sys_sendmsg+0xfa/0x1d0 do_syscall_64+0x35/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd
Freed by task 7846: kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 kasan_save_free_info+0x27/0x40 ____kasan_slab_free+0x161/0x1c0 slab_free_freelist_hook+0x119/0x220 __kmem_cache_free+0xb4/0x2e0 rcu_core+0x809/0x1bd0
bcm_op is freed before procfs entry be removed in bcm_release(), this lead to bcm_proc_show() may read the freed bcm_op.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-docUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debugUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-coreUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modulesUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-64kUpgrade kernel-uki-virt-addonsUpgrade rvUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-rt-kvmUpgrade kernel-64k-devel-matchedUpgrade bpftoolUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libs-devel | Mar 17, 2025 | Nov 28, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-livepatch-5.10.192-182.736Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Mar 14, 2025 | Nov 28, 2024 |
| Debian | — | Upgrade linux | Dec 2, 2024 | Nov 28, 2024 |
| Oracle_linux | — | Upgrade kernel | Mar 13, 2025 | Nov 28, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Mar 11, 2025 | Nov 28, 2024 |
| Rocky_linux | — | Upgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-coreUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-devel | Jul 31, 2025 | Jul 29, 2025 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-fipsUpgrade linux-ibmUpgrade linux-nvidiaUpgrade linux-intel-iotg-5.15Upgrade linux-riscv-5.15Upgrade linux-oracle-5.15Upgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-azure-fdeUpgrade linux-hwe-5.4Upgrade linux-realtimeUpgrade linux-azure-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-gcp-5.15Upgrade linux-lowlatencyUpgrade linux-intel-iotgUpgrade linux-ibm-5.15Upgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-xilinx-zynqmpUpgrade linux-intel-iot-realtimeUpgrade linux-gcp-5.4Upgrade linux-gkeUpgrade linux-kvmUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegraUpgrade linux-hwe-5.15Upgrade linux-iotUpgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-ibm-5.4Upgrade linux-gcp-fipsUpgrade linux-aws-5.15Upgrade linuxUpgrade linux-aws | Dec 20, 2024 | Nov 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Nov 28, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub