In the Linux kernel, the following vulnerability has been resolved:
kprobes: Fix possible use-after-free issue on kprobe registration
When unloading a module, its state is changing MODULE_STATE_LIVE -> MODULE_STATE_GOING -> MODULE_STATE_UNFORMED. Each change will take a time. `is_module_text_address()` and `__module_text_address()` works with MODULE_STATE_LIVE and MODULE_STATE_GOING. If we use `is_module_text_address()` and `__module_text_address()` separately, there is a chance that the first one is succeeded but the next one is failed because module->state becomes MODULE_STATE_UNFORMED between those operations.
In `check_kprobe_address_safe()`, if the second `__module_text_address()` is failed, that is ignored because it expected a kernel_text address. But it may have failed simply because module->state has been changed to MODULE_STATE_UNFORMED. In this case, arm_kprobe() will try to modify non-exist module text address (use-after-free).
To fix this problem, we should not use separated `is_module_text_address()` and `__module_text_address()`, but use only `__module_text_address()` once and do `try_module_get(module)` which is only available with MODULE_STATE_LIVE.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.158-103.164Upgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-livepatch-4.14.348-265.562Upgrade bpftoolUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perf | Mar 14, 2025 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf | Mar 27, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-headers | Jan 21, 2025 | May 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2024 |
| Suse | — | Upgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade dtb-nvidiaUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade kernel-syms-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade kernel-default-manUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-baseUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade dlm-kmp-rt | Jun 12, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-aws-hweUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-4.15.0-1180-azureUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-1172-awsUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-ibmUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-azureUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-bluefieldUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-228-genericUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-oemUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-virtualUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-azure-cvmUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub