In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: free rx_data_reassembly skb on NCI device cleanup
rx_data_reassembly skb is stored during NCI data exchange for processing fragmented packets. It is dropped only when the last fragment is processed or when an NTF packet with NCI_OP_RF_DEACTIVATE_NTF opcode is received. However, the NCI device may be deallocated before that which leads to skb leak.
As by design the rx_data_reassembly skb is bound to the NCI device and nothing prevents the device to be freed before the skb is processed in some way and cleaned, free it on the NCI device cleanup.
Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade dtb-amazonUpgrade dtb-sprdUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-manUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade dtb-amdUpgrade kernel-64kbUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kernel-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-syms-azure | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-virtualUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-gkeop-5.4Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-starfiveUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-5.15.0-1058-kvm | May 17, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub