In the Linux kernel, the following vulnerability has been resolved:
gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
The gtp_link_ops operations structure for the subsystem must be registered after registering the gtp_net_ops pernet operations structure.
Syzkaller hit 'general protection fault in gtp_genl_dump_pdp' bug:
[ 1010.702740] gtp: GTP module unloaded [ 1010.715877] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 1010.715888] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1010.715895] CPU: 1 PID: 128616 Comm: a.out Not tainted 6.8.0-rc6-std-def-alt1 #1 [ 1010.715899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-alt1 04/01/2014 [ 1010.715908] RIP: 0010:gtp_newlink+0x4d7/0x9c0 [gtp] [ 1010.715915] Code: 80 3c 02 00 0f 85 41 04 00 00 48 8b bb d8 05 00 00 e8 ed f6 ff ff 48 89 c2 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 4f 04 00 00 4c 89 e2 4c 8b 6d 00 48 b8 00 00 00 [ 1010.715920] RSP: 0018:ffff888020fbf180 EFLAGS: 00010203 [ 1010.715929] RAX: dffffc0000000000 RBX: ffff88800399c000 RCX: 0000000000000000 [ 1010.715933] RDX: 0000000000000001 RSI: ffffffff84805280 RDI: 0000000000000282 [ 1010.715938] RBP: 000000000000000d R08: 0000000000000001 R09: 0000000000000000 [ 1010.715942] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800399cc80 [ 1010.715947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000400 [ 1010.715953] FS: 00007fd1509ab5c0(0000) GS:ffff88805b300000(0000) knlGS:0000000000000000 [ 1010.715958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1010.715962] CR2: 0000000000000000 CR3: 000000001c07a000 CR4: 0000000000750ee0 [ 1010.715968] PKRU: 55555554 [ 1010.715972] Call Trace: [ 1010.715985] ? __die_body.cold+0x1a/0x1f [ 1010.715995] ? die_addr+0x43/0x70 [ 1010.716002] ? exc_general_protection+0x199/0x2f0 [ 1010.716016] ? asm_exc_general_protection+0x1e/0x30 [ 1010.716026] ? gtp_newlink+0x4d7/0x9c0 [gtp] [ 1010.716034] ? gtp_net_exit+0x150/0x150 [gtp] [ 1010.716042] __rtnl_newlink+0x1063/0x1700 [ 1010.716051] ? rtnl_setlink+0x3c0/0x3c0 [ 1010.716063] ? is_bpf_text_address+0xc0/0x1f0 [ 1010.716070] ? kernel_text_address.part.0+0xbb/0xd0 [ 1010.716076] ? __kernel_text_address+0x56/0xa0 [ 1010.716084] ? unwind_get_return_address+0x5a/0xa0 [ 1010.716091] ? create_prof_cpu_mask+0x30/0x30 [ 1010.716098] ? arch_stack_walk+0x9e/0xf0 [ 1010.716106] ? stack_trace_save+0x91/0xd0 [ 1010.716113] ? stack_trace_consume_entry+0x170/0x170 [ 1010.716121] ? __lock_acquire+0x15c5/0x5380 [ 1010.716139] ? mark_held_locks+0x9e/0xe0 [ 1010.716148] ? kmem_cache_alloc_trace+0x35f/0x3c0 [ 1010.716155] ? __rtnl_newlink+0x1700/0x1700 [ 1010.716160] rtnl_newlink+0x69/0xa0 [ 1010.716166] rtnetlink_rcv_msg+0x43b/0xc50 [ 1010.716172] ? rtnl_fdb_dump+0x9f0/0x9f0 [ 1010.716179] ? lock_acquire+0x1fe/0x560 [ 1010.716188] ? netlink_deliver_tap+0x12f/0xd50 [ 1010.716196] netlink_rcv_skb+0x14d/0x440 [ 1010.716202] ? rtnl_fdb_dump+0x9f0/0x9f0 [ 1010.716208] ? netlink_ack+0xab0/0xab0 [ 1010.716213] ? netlink_deliver_tap+0x202/0xd50 [ 1010.716220] ? netlink_deliver_tap+0x218/0xd50 [ 1010.716226] ? __virt_addr_valid+0x30b/0x590 [ 1010.716233] netlink_unicast+0x54b/0x800 [ 1010.716240] ? netlink_attachskb+0x870/0x870 [ 1010.716248] ? __check_object_size+0x2de/0x3b0 [ 1010.716254] netlink_sendmsg+0x938/0xe40 [ 1010.716261] ? netlink_unicast+0x800/0x800 [ 1010.716269] ? __import_iovec+0x292/0x510 [ 1010.716276] ? netlink_unicast+0x800/0x800 [ 1010.716284] __sock_sendmsg+0x159/0x190 [ 1010.716290] ____sys_sendmsg+0x712/0x880 [ 1010.716297] ? sock_write_iter+0x3d0/0x3d0 [ 1010.716304] ? __ia32_sys_recvmmsg+0x270/0x270 [ 1010.716309] ? lock_acquire+0x1fe/0x560 [ 1010.716315] ? drain_array_locked+0x90/0x90 [ 1010.716324] ___sys_sendmsg+0xf8/0x170 [ 1010.716331] ? sendmsg_copy_msghdr+0x170/0x170 [ 1010.716337] ? lockdep_init_map ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.152-100.162Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-develUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftool | Aug 19, 2024 | Apr 4, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.82-99.168Upgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-modules-extra | Feb 17, 2025 | Apr 4, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade dtb-apmUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade cluster-md-kmp-defaultUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade dtb-amlogicUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade kernel-azure-baseUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-symsUpgrade reiserfs-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-64kbUpgrade kernel-defaultUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-rt | May 6, 2024 | Apr 4, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-raspi2Upgrade linux-image-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-intelUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-oem-20.04cUpgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-generic-64k-hwe-20.04 | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub