In the Linux kernel, the following vulnerability has been resolved:
kprobes: Fix possible use-after-free issue on kprobe registration
When unloading a module, its state is changing MODULE_STATE_LIVE -> MODULE_STATE_GOING -> MODULE_STATE_UNFORMED. Each change will take a time. `is_module_text_address()` and `__module_text_address()` works with MODULE_STATE_LIVE and MODULE_STATE_GOING. If we use `is_module_text_address()` and `__module_text_address()` separately, there is a chance that the first one is succeeded but the next one is failed because module->state becomes MODULE_STATE_UNFORMED between those operations.
In `check_kprobe_address_safe()`, if the second `__module_text_address()` is failed, that is ignored because it expected a kernel_text address. But it may have failed simply because module->state has been changed to MODULE_STATE_UNFORMED. In this case, arm_kprobe() will try to modify non-exist module text address (use-after-free).
To fix this problem, we should not use separated `is_module_text_address()` and `__module_text_address()`, but use only `__module_text_address()` once and do `try_module_get(module)` which is only available with MODULE_STATE_LIVE.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-toolsUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-livepatch-4.14.348-265.562Upgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.15.158-103.164Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfo | Mar 14, 2025 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-modules-extraUpgrade perfUpgrade perf-debuginfo | Mar 27, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf | Jan 21, 2025 | May 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2024 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade kernel-azureUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-sourceUpgrade dtb-amdUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade dtb-appleUpgrade kernel-docsUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-azure-baseUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade dtb-socionextUpgrade kernel-symsUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-rt-vdsoUpgrade dlm-kmp-azure | Jun 12, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-4.15.0-1180-azureUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-genericUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-azureUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-azure-cvmUpgrade linux-image-oemUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-intelUpgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-virtualUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-4.15.0-228-genericUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-xilinx-zynqmp | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub