In the Linux kernel, the following vulnerability has been resolved:
kprobes: Fix possible use-after-free issue on kprobe registration
When unloading a module, its state is changing MODULE_STATE_LIVE -> MODULE_STATE_GOING -> MODULE_STATE_UNFORMED. Each change will take a time. `is_module_text_address()` and `__module_text_address()` works with MODULE_STATE_LIVE and MODULE_STATE_GOING. If we use `is_module_text_address()` and `__module_text_address()` separately, there is a chance that the first one is succeeded but the next one is failed because module->state becomes MODULE_STATE_UNFORMED between those operations.
In `check_kprobe_address_safe()`, if the second `__module_text_address()` is failed, that is ignored because it expected a kernel_text address. But it may have failed simply because module->state has been changed to MODULE_STATE_UNFORMED. In this case, arm_kprobe() will try to modify non-exist module text address (use-after-free).
To fix this problem, we should not use separated `is_module_text_address()` and `__module_text_address()`, but use only `__module_text_address()` once and do `try_module_get(module)` which is only available with MODULE_STATE_LIVE.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.216-204.855Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perfUpgrade kernel-livepatch-4.14.348-265.562Upgrade bpftoolUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.158-103.164Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf | Mar 14, 2025 | May 20, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.87-99.174Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf | Mar 27, 2025 | May 20, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 9, 2024 | May 20, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade bpftoolUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Jan 21, 2025 | May 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2024 |
| Suse | — | Upgrade kernel-rtUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade dtb-rockchipUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade kernel-symsUpgrade kernel-azure-develUpgrade dtb-apmUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-azure-baseUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade kernel-debugUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade kernel-default-livepatch-develUpgrade dtb-amazonUpgrade kernel-sourceUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade kernel-azureUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kb | Jun 12, 2024 | May 20, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1165-gcpUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-azure-cvmUpgrade linux-image-gkeUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-228-genericUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1155-kvmUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-4.15.0-1134-oracleUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-4.15.0-228-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-4.15.0-1172-awsUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-raspiUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-4.15.0-1180-azureUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeop-5.4 | Jul 12, 2024 | May 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub