In the Linux kernel, the following vulnerability has been resolved:
genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()
irq_find_at_or_after() dereferences the interrupt descriptor which is returned by mt_find() while neither holding sparse_irq_lock nor RCU read lock, which means the descriptor can be freed between mt_find() and the dereference:
CPU0 CPU1 desc = mt_find() delayed_free_desc(desc) irq_desc_get_irq(desc)
The use-after-free is reported by KASAN:
Call trace: irq_get_next_irq+0x58/0x84 show_stat+0x638/0x824 seq_read_iter+0x158/0x4ec proc_reg_read_iter+0x94/0x12c vfs_read+0x1e0/0x2c8
Freed by task 4471: slab_free_freelist_hook+0x174/0x1e0 __kmem_cache_free+0xa4/0x1dc kfree+0x64/0x128 irq_kobj_release+0x28/0x3c kobject_put+0xcc/0x1e0 delayed_free_desc+0x14/0x2c rcu_do_batch+0x214/0x720
Guard the access with a RCU read lock section.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 25, 2024 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade reiserfs-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-source-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kselftests-kmp-defaultUpgrade dtb-appleUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade kernel-docsUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade kernel-devel-rtUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade dtb-socionext | Jul 23, 2024 | Jun 25, 2024 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-gkeUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1010-gke | Sep 12, 2024 | Jun 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub