In the Linux kernel, the following vulnerability has been resolved:
spi: lpspi: Avoid potential use-after-free in probe()
fsl_lpspi_probe() is allocating/disposing memory manually with spi_alloc_host()/spi_alloc_target(), but uses devm_spi_register_controller(). In case of error after the latter call the memory will be explicitly freed in the probe function by spi_controller_put() call, but used afterwards by "devm" management outside probe() (spi_unregister_controller() <- devm_spi_unregister() below).
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000070 ... Call trace: kernfs_find_ns kernfs_find_and_get_ns sysfs_remove_group sysfs_remove_groups device_remove_attrs device_del spi_unregister_controller devm_spi_unregister release_nodes devres_release_all really_probe driver_probe_device __device_attach_driver bus_for_each_drv __device_attach device_initial_probe bus_probe_device deferred_probe_work_func process_one_work worker_thread kthread ret_from_fork
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-docsUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade dtb-apmUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade dtb-mediatekUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-64kb | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-azureUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-6.8.0-35-generic-64k | Jul 1, 2024 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub