In the Linux kernel, the following vulnerability has been resolved:
lib: cpu_rmap: Avoid use after free on rmap->obj array entries
When calling irq_set_affinity_notifier() with NULL at the notify argument, it will cause freeing of the glue pointer in the corresponding array entry but will leave the pointer in the array. A subsequent call to free_irq_cpu_rmap() will try to free this entry again leading to possible use after free.
Fix that by setting NULL to the array entry and checking that we have non-zero at the array entry when iterating over the array in free_irq_cpu_rmap().
The current code does not suffer from this since there are no cases where irq_set_affinity_notifier(irq, NULL) (note the NULL passed for the notify arg) is called, followed by a call to free_irq_cpu_rmap() so we don't hit and issue. Subsequent patches in this series excersize this flow, hence the required fix.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.184-174.730Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.318-240.529Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.117-72.142 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.34-56.100Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo | Oct 16, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-ibm-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-hwe-5.4Upgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-gcpUpgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-nvidiaUpgrade linuxUpgrade linux-ibm-5.15Upgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-iotUpgrade linux-aws-5.15Upgrade linux-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-5.15Upgrade linux-oracle-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-oracle-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-kvmUpgrade linux-xilinx-zynqmpUpgrade linux-realtimeUpgrade linux-gkeUpgrade linux-raspiUpgrade linux-nvidia-tegraUpgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-azure | Oct 10, 2025 | Oct 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub