In the Linux kernel, the following vulnerability has been resolved:
kprobes: Fix possible use-after-free issue on kprobe registration
When unloading a module, its state is changing MODULE_STATE_LIVE -> MODULE_STATE_GOING -> MODULE_STATE_UNFORMED. Each change will take a time. `is_module_text_address()` and `__module_text_address()` works with MODULE_STATE_LIVE and MODULE_STATE_GOING. If we use `is_module_text_address()` and `__module_text_address()` separately, there is a chance that the first one is succeeded but the next one is failed because module->state becomes MODULE_STATE_UNFORMED between those operations.
In `check_kprobe_address_safe()`, if the second `__module_text_address()` is failed, that is ignored because it expected a kernel_text address. But it may have failed simply because module->state has been changed to MODULE_STATE_UNFORMED. In this case, arm_kprobe() will try to modify non-exist module text address (use-after-free).
To fix this problem, we should not use separated `is_module_text_address()` and `__module_text_address()`, but use only `__module_text_address()` once and do `try_module_get(module)` which is only available with MODULE_STATE_LIVE.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.348-265.562Upgrade python-perfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.158-103.164 | Mar 14, 2025 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf | Mar 27, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools | Jan 21, 2025 | May 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-sourceUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-64kbUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-devel-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-default-develUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade dtb-appleUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extra | Jun 12, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-4.15.0-228-genericUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-awsUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-4.15.0-1180-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-aws-hweUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-azure-lts-20.04 | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub