In the Linux kernel, the following vulnerability has been resolved:
dpll: fix pin dump crash for rebound module
When a kernel module is unbound but the pin resources were not entirely freed (other kernel module instance of the same PCI device have had kept the reference to that pin), and kernel module is again bound, the pin properties would not be updated (the properties are only assigned when memory for the pin is allocated), prop pointer still points to the kernel module memory of the kernel module which was deallocated on the unbind.
If the pin dump is invoked in this state, the result is a kernel crash. Prevent the crash by storing persistent pin properties in dpll subsystem, copy the content from the kernel module when pin is allocated, instead of using memory of the kernel module.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 17, 2024 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade dtb-nvidiaUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade dtb-qcomUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade cluster-md-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-default-extra | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtimeUpgrade linux-bluefield | Feb 11, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub