In the Linux kernel, the following vulnerability has been resolved:
tipc: fix UAF in error path
Sam Page (sam4k) working with Trend Micro Zero Day Initiative reported a UAF in the tipc_buf_append() error path:
BUG: KASAN: slab-use-after-free in kfree_skb_list_reason+0x47e/0x4c0 linux/net/core/skbuff.c:1183 Read of size 8 at addr ffff88804d2a7c80 by task poc/8034
CPU: 1 PID: 8034 Comm: poc Not tainted 6.8.2 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04/01/2014 Call Trace: <IRQ> __dump_stack linux/lib/dump_stack.c:88 dump_stack_lvl+0xd9/0x1b0 linux/lib/dump_stack.c:106 print_address_description linux/mm/kasan/report.c:377 print_report+0xc4/0x620 linux/mm/kasan/report.c:488 kasan_report+0xda/0x110 linux/mm/kasan/report.c:601 kfree_skb_list_reason+0x47e/0x4c0 linux/net/core/skbuff.c:1183 skb_release_data+0x5af/0x880 linux/net/core/skbuff.c:1026 skb_release_all linux/net/core/skbuff.c:1094 __kfree_skb linux/net/core/skbuff.c:1108 kfree_skb_reason+0x12d/0x210 linux/net/core/skbuff.c:1144 kfree_skb linux/./include/linux/skbuff.h:1244 tipc_buf_append+0x425/0xb50 linux/net/tipc/msg.c:186 tipc_link_input+0x224/0x7c0 linux/net/tipc/link.c:1324 tipc_link_rcv+0x76e/0x2d70 linux/net/tipc/link.c:1824 tipc_rcv+0x45f/0x10f0 linux/net/tipc/node.c:2159 tipc_udp_recv+0x73b/0x8f0 linux/net/tipc/udp_media.c:390 udp_queue_rcv_one_skb+0xad2/0x1850 linux/net/ipv4/udp.c:2108 udp_queue_rcv_skb+0x131/0xb00 linux/net/ipv4/udp.c:2186 udp_unicast_rcv_skb+0x165/0x3b0 linux/net/ipv4/udp.c:2346 __udp4_lib_rcv+0x2594/0x3400 linux/net/ipv4/udp.c:2422 ip_protocol_deliver_rcu+0x30c/0x4e0 linux/net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x2e4/0x520 linux/net/ipv4/ip_input.c:233 NF_HOOK linux/./include/linux/netfilter.h:314 NF_HOOK linux/./include/linux/netfilter.h:308 ip_local_deliver+0x18e/0x1f0 linux/net/ipv4/ip_input.c:254 dst_input linux/./include/net/dst.h:461 ip_rcv_finish linux/net/ipv4/ip_input.c:449 NF_HOOK linux/./include/linux/netfilter.h:314 NF_HOOK linux/./include/linux/netfilter.h:308 ip_rcv+0x2c5/0x5d0 linux/net/ipv4/ip_input.c:569 __netif_receive_skb_one_core+0x199/0x1e0 linux/net/core/dev.c:5534 __netif_receive_skb+0x1f/0x1c0 linux/net/core/dev.c:5648 process_backlog+0x101/0x6b0 linux/net/core/dev.c:5976 __napi_poll.constprop.0+0xba/0x550 linux/net/core/dev.c:6576 napi_poll linux/net/core/dev.c:6645 net_rx_action+0x95a/0xe90 linux/net/core/dev.c:6781 __do_softirq+0x21f/0x8e7 linux/kernel/softirq.c:553 do_softirq linux/kernel/softirq.c:454 do_softirq+0xb2/0xf0 linux/kernel/softirq.c:441 </IRQ> <TASK> __local_bh_enable_ip+0x100/0x120 linux/kernel/softirq.c:381 local_bh_enable linux/./include/linux/bottom_half.h:33 rcu_read_unlock_bh linux/./include/linux/rcupdate.h:851 __dev_queue_xmit+0x871/0x3ee0 linux/net/core/dev.c:4378 dev_queue_xmit linux/./include/linux/netdevice.h:3169 neigh_hh_output linux/./include/net/neighbour.h:526 neigh_output linux/./include/net/neighbour.h:540 ip_finish_output2+0x169f/0x2550 linux/net/ipv4/ip_output.c:235 __ip_finish_output linux/net/ipv4/ip_output.c:313 __ip_finish_output+0x49e/0x950 linux/net/ipv4/ip_output.c:295 ip_finish_output+0x31/0x310 linux/net/ipv4/ip_output.c:323 NF_HOOK_COND linux/./include/linux/netfilter.h:303 ip_output+0x13b/0x2a0 linux/net/ipv4/ip_output.c:433 dst_output linux/./include/net/dst.h:451 ip_local_out linux/net/ipv4/ip_output.c:129 ip_send_skb+0x3e5/0x560 linux/net/ipv4/ip_output.c:1492 udp_send_skb+0x73f/0x1530 linux/net/ipv4/udp.c:963 udp_sendmsg+0x1a36/0x2b40 linux/net/ipv4/udp.c:1250 inet_sendmsg+0x105/0x140 linux/net/ipv4/af_inet.c:850 sock_sendmsg_nosec linux/net/socket.c:730 __sock_sendmsg linux/net/socket.c:745 __sys_sendto+0x42c/0x4e0 linux/net/socket.c:2191 __do_sys_sendto linux/net/socket.c:2203 __se_sys_sendto linux/net/socket.c:2199 __x64_sys_sendto+0xe0/0x1c0 linux/net/socket.c:2199 do_syscall_x64 linux/arch/x86/entry/common.c:52 do_syscall_ ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-modulesUpgrade kernel-64kUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-64k-develUpgrade bpftoolUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-develUpgrade kernel-64k-coreUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade rvUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rtUpgrade kernel-64k-debugUpgrade kernel-toolsUpgrade libperf | Aug 12, 2024 | May 30, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.348-265.562Upgrade perfUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Jul 9, 2024 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Oct 9, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | May 30, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 6, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 16, 2024 | May 30, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extraUpgrade libperf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade libperfUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-rt-kvmUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade bpftool-debuginfoUpgrade rtlaUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 29, 2024 | May 30, 2024 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade kernel-debug-develUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-debugUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-lgUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-default | Dec 5, 2025 | Dec 13, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1140-oracleUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-4.15.0-1186-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-4.4.0-1179-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-aws-hweUpgrade linux-image-kvmUpgrade linux-image-4.15.0-235-genericUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-raspi2Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1070-azureUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-235-lowlatencyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-192-genericUpgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-5.4.0-1097-gkeopUpgrade linux-image-4.15.0-1171-gcpUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-oemUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-5.4.0-1130-awsUpgrade linux-image-4.15.0-1161-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1178-awsUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeop | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub