In the Linux kernel, the following vulnerability has been resolved:
dpll: fix pin dump crash for rebound module
When a kernel module is unbound but the pin resources were not entirely freed (other kernel module instance of the same PCI device have had kept the reference to that pin), and kernel module is again bound, the pin properties would not be updated (the properties are only assigned when memory for the pin is allocated), prop pointer still points to the kernel module memory of the kernel module which was deallocated on the unbind.
If the pin dump is invoked in this state, the result is a kernel crash. Prevent the crash by storing persistent pin properties in dpll subsystem, copy the content from the kernel module when pin is allocated, instead of using memory of the kernel module.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 17, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azure | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-raspi-realtime | Feb 11, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub