In the Linux kernel, the following vulnerability has been resolved:
loop: Fix use-after-free issues
do_req_filebacked() calls blk_mq_complete_request() synchronously or asynchronously when using asynchronous I/O unless memory allocation fails. Hence, modify loop_handle_cmd() such that it does not dereference 'cmd' nor 'rq' after do_req_filebacked() finished unless we are sure that the request has not yet been completed. This patch fixes the following kernel crash:
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000054 Call trace: css_put.42938+0x1c/0x1ac loop_process_work+0xc8c/0xfd4 loop_rootcg_workfn+0x24/0x34 process_one_work+0x244/0x558 worker_thread+0x400/0x8fc kthread+0x16c/0x1e0 ret_from_fork+0x10/0x20
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.104-63.140Upgrade perf-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernelUpgrade perfUpgrade bpftoolUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.21-1.45Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-static | Aug 5, 2025 | May 2, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-nvidiaUpgrade linux-oracleUpgrade linux-awsUpgrade linux-azureUpgrade linux-ibmUpgrade linux-xilinx-zynqmpUpgrade linux-realtimeUpgrade linux-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-kvmUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-intel-iotgUpgrade linux-nvidia-tegra-igxUpgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.15Upgrade linux-aws-5.15Upgrade linux-gcpUpgrade linux-nvidia-tegraUpgrade linux-intel-iot-realtimeUpgrade linux-bluefieldUpgrade linux-oracle-5.15Upgrade linuxUpgrade linux-lowlatency-hwe-5.15Upgrade linux-riscv-5.15 | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub