In the Linux kernel, the following vulnerability has been resolved:
gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
The gtp_link_ops operations structure for the subsystem must be registered after registering the gtp_net_ops pernet operations structure.
Syzkaller hit 'general protection fault in gtp_genl_dump_pdp' bug:
[ 1010.702740] gtp: GTP module unloaded [ 1010.715877] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI [ 1010.715888] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 1010.715895] CPU: 1 PID: 128616 Comm: a.out Not tainted 6.8.0-rc6-std-def-alt1 #1 [ 1010.715899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.0-alt1 04/01/2014 [ 1010.715908] RIP: 0010:gtp_newlink+0x4d7/0x9c0 [gtp] [ 1010.715915] Code: 80 3c 02 00 0f 85 41 04 00 00 48 8b bb d8 05 00 00 e8 ed f6 ff ff 48 89 c2 48 89 c5 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 4f 04 00 00 4c 89 e2 4c 8b 6d 00 48 b8 00 00 00 [ 1010.715920] RSP: 0018:ffff888020fbf180 EFLAGS: 00010203 [ 1010.715929] RAX: dffffc0000000000 RBX: ffff88800399c000 RCX: 0000000000000000 [ 1010.715933] RDX: 0000000000000001 RSI: ffffffff84805280 RDI: 0000000000000282 [ 1010.715938] RBP: 000000000000000d R08: 0000000000000001 R09: 0000000000000000 [ 1010.715942] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88800399cc80 [ 1010.715947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000400 [ 1010.715953] FS: 00007fd1509ab5c0(0000) GS:ffff88805b300000(0000) knlGS:0000000000000000 [ 1010.715958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1010.715962] CR2: 0000000000000000 CR3: 000000001c07a000 CR4: 0000000000750ee0 [ 1010.715968] PKRU: 55555554 [ 1010.715972] Call Trace: [ 1010.715985] ? __die_body.cold+0x1a/0x1f [ 1010.715995] ? die_addr+0x43/0x70 [ 1010.716002] ? exc_general_protection+0x199/0x2f0 [ 1010.716016] ? asm_exc_general_protection+0x1e/0x30 [ 1010.716026] ? gtp_newlink+0x4d7/0x9c0 [gtp] [ 1010.716034] ? gtp_net_exit+0x150/0x150 [gtp] [ 1010.716042] __rtnl_newlink+0x1063/0x1700 [ 1010.716051] ? rtnl_setlink+0x3c0/0x3c0 [ 1010.716063] ? is_bpf_text_address+0xc0/0x1f0 [ 1010.716070] ? kernel_text_address.part.0+0xbb/0xd0 [ 1010.716076] ? __kernel_text_address+0x56/0xa0 [ 1010.716084] ? unwind_get_return_address+0x5a/0xa0 [ 1010.716091] ? create_prof_cpu_mask+0x30/0x30 [ 1010.716098] ? arch_stack_walk+0x9e/0xf0 [ 1010.716106] ? stack_trace_save+0x91/0xd0 [ 1010.716113] ? stack_trace_consume_entry+0x170/0x170 [ 1010.716121] ? __lock_acquire+0x15c5/0x5380 [ 1010.716139] ? mark_held_locks+0x9e/0xe0 [ 1010.716148] ? kmem_cache_alloc_trace+0x35f/0x3c0 [ 1010.716155] ? __rtnl_newlink+0x1700/0x1700 [ 1010.716160] rtnl_newlink+0x69/0xa0 [ 1010.716166] rtnetlink_rcv_msg+0x43b/0xc50 [ 1010.716172] ? rtnl_fdb_dump+0x9f0/0x9f0 [ 1010.716179] ? lock_acquire+0x1fe/0x560 [ 1010.716188] ? netlink_deliver_tap+0x12f/0xd50 [ 1010.716196] netlink_rcv_skb+0x14d/0x440 [ 1010.716202] ? rtnl_fdb_dump+0x9f0/0x9f0 [ 1010.716208] ? netlink_ack+0xab0/0xab0 [ 1010.716213] ? netlink_deliver_tap+0x202/0xd50 [ 1010.716220] ? netlink_deliver_tap+0x218/0xd50 [ 1010.716226] ? __virt_addr_valid+0x30b/0x590 [ 1010.716233] netlink_unicast+0x54b/0x800 [ 1010.716240] ? netlink_attachskb+0x870/0x870 [ 1010.716248] ? __check_object_size+0x2de/0x3b0 [ 1010.716254] netlink_sendmsg+0x938/0xe40 [ 1010.716261] ? netlink_unicast+0x800/0x800 [ 1010.716269] ? __import_iovec+0x292/0x510 [ 1010.716276] ? netlink_unicast+0x800/0x800 [ 1010.716284] __sock_sendmsg+0x159/0x190 [ 1010.716290] ____sys_sendmsg+0x712/0x880 [ 1010.716297] ? sock_write_iter+0x3d0/0x3d0 [ 1010.716304] ? __ia32_sys_recvmmsg+0x270/0x270 [ 1010.716309] ? lock_acquire+0x1fe/0x560 [ 1010.716315] ? drain_array_locked+0x90/0x90 [ 1010.716324] ___sys_sendmsg+0xf8/0x170 [ 1010.716331] ? sendmsg_copy_msghdr+0x170/0x170 [ 1010.716337] ? lockdep_init_map ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.152-100.162Upgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.343-259.562Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-toolsUpgrade bpftool | Aug 19, 2024 | Apr 4, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.82-99.168Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-tools-debuginfo | Feb 17, 2025 | Apr 4, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade dtb-rockchipUpgrade kernel-rt_debugUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade dtb-renesasUpgrade dtb-appleUpgrade dtb-mediatekUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade kernel-64kbUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-amazonUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade gfs2-kmp-64kb | May 6, 2024 | Apr 4, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oemUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azureUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-oem-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-gkeop-5.4Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1126-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-20.04 | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub