In the Linux kernel, the following vulnerability has been resolved:
net: sparx5: Fix use after free inside sparx5_del_mact_entry
Based on the static analyzis of the code it looks like when an entry from the MAC table was removed, the entry was still used after being freed. More precise the vid of the mac_entry was used after calling devm_kfree on the mac_entry. The fix consists in first using the vid of the mac_entry to delete the entry from the HW and after that to free it.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade kernel-devel-rtUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade kernel-default-baseUpgrade dtb-armUpgrade dtb-freescaleUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade dtb-appleUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kselftests-kmp-defaultUpgrade kernel-macrosUpgrade dtb-marvellUpgrade kernel-64kbUpgrade dtb-lgUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdso | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-intelUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04 | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub