In the Linux kernel, the following vulnerability has been resolved:
scsi: target: pscsi: Fix bio_put() for error case
As of commit 066ff571011d ("block: turn bio_kmalloc into a simple kmalloc wrapper"), a bio allocated by bio_kmalloc() must be freed by bio_uninit() and kfree(). That is not done properly for the error case, hitting WARN and NULL pointer dereference in bio_free().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfo | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-sourceUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dtb-amazonUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rtUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade dtb-renesasUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade dtb-sprd | May 6, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub