In the Linux kernel, the following vulnerability has been resolved:
net: sparx5: Fix use after free inside sparx5_del_mact_entry
Based on the static analyzis of the code it looks like when an entry from the MAC table was removed, the entry was still used after being freed. More precise the vid of the mac_entry was used after calling devm_kfree on the mac_entry. The fix consists in first using the vid of the mac_entry to delete the entry from the HW and after that to free it.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade dtb-lgUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-rt_debug-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade kernel-devel-rtUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-symsUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade gfs2-kmp-azureUpgrade dtb-socionext | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-112-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-intelUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1046-gkeop | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub