In the Linux kernel, the following vulnerability has been resolved:
net: bridge: mst: fix vlan use-after-free
syzbot reported a suspicious rcu usage[1] in bridge's mst code. While fixing it I noticed that nothing prevents a vlan to be freed while walking the list from the same path (br forward delay timer). Fix the rcu usage and also make sure we are not accessing freed memory by making br_mst_vlan_set_state use rcu read lock.
[1] WARNING: suspicious RCU usage 6.9.0-rc6-syzkaller #0 Not tainted ----------------------------- net/bridge/br_private.h:1599 suspicious rcu_dereference_protected() usage! ... stack backtrace: CPU: 1 PID: 8017 Comm: syz-executor.1 Not tainted 6.9.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Call Trace: <IRQ> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:114 lockdep_rcu_suspicious+0x221/0x340 kernel/locking/lockdep.c:6712 nbp_vlan_group net/bridge/br_private.h:1599 [inline] br_mst_set_state+0x1ea/0x650 net/bridge/br_mst.c:105 br_set_state+0x28a/0x7b0 net/bridge/br_stp.c:47 br_forward_delay_timer_expired+0x176/0x440 net/bridge/br_stp_timer.c:88 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1793 expire_timers kernel/time/timer.c:1844 [inline] __run_timers kernel/time/timer.c:2418 [inline] __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2429 run_timer_base kernel/time/timer.c:2438 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2448 __do_softirq+0x2c6/0x980 kernel/softirq.c:554 invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf2/0x1c0 kernel/softirq.c:633 irq_exit_rcu+0x9/0x30 kernel/softirq.c:645 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:lock_acquire+0x264/0x550 kernel/locking/lockdep.c:5758 Code: 2b 00 74 08 4c 89 f7 e8 ba d1 84 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 RSP: 0018:ffffc90013657100 EFLAGS: 00000206 RAX: 0000000000000001 RBX: 1ffff920026cae2c RCX: 0000000000000001 RDX: dffffc0000000000 RSI: ffffffff8bcaca00 RDI: ffffffff8c1eaa60 RBP: ffffc90013657260 R08: ffffffff92efe507 R09: 1ffffffff25dfca0 R10: dffffc0000000000 R11: fffffbfff25dfca1 R12: 1ffff920026cae28 R13: dffffc0000000000 R14: ffffc90013657160 R15: 0000000000000246
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-64k-develUpgrade kernel-64k-debug-devel-matchedUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-64k-debug-develUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-coreUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64kUpgrade kernel-64k-devel-matchedUpgrade kernel-modules | Aug 12, 2024 | Jun 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-tools-devel | Feb 17, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade bpftool-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-debuginfoUpgrade perf-debuginfoUpgrade libperfUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-uki-virtUpgrade libperf-debuginfoUpgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-uki-virtUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extra | Aug 22, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade dtb-armUpgrade kernel-azureUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-azure-livepatch-develUpgrade dtb-amdUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-default-develUpgrade dtb-alteraUpgrade kernel-symsUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade dtb-lgUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade reiserfs-kmp-default | Dec 5, 2025 | Sep 12, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-oracle-64k | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub