In the Linux kernel, the following vulnerability has been resolved:
dpll: fix pin dump crash for rebound module
When a kernel module is unbound but the pin resources were not entirely freed (other kernel module instance of the same PCI device have had kept the reference to that pin), and kernel module is again bound, the pin properties would not be updated (the properties are only assigned when memory for the pin is allocated), prop pointer still points to the kernel module memory of the kernel module which was deallocated on the unbind.
If the pin dump is invoked in this state, the result is a kernel crash. Prevent the crash by storing persistent pin properties in dpll subsystem, copy the content from the kernel module when pin is allocated, instead of using memory of the kernel module.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 17, 2024 |
| Suse | — | Upgrade dtb-caviumUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade dtb-appleUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade dtb-socionextUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade kernel-azureUpgrade kernel-debugUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rt | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-raspi-realtime | Feb 11, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub