In the Linux kernel, the following vulnerability has been resolved:
RDMA/hns: Fix UAF for cq async event
The refcount of CQ is not protected by locks. When CQ asynchronous events and CQ destruction are concurrent, CQ may have been released, which will cause UAF.
Use the xa_lock() to protect the CQ refcount.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-armUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-azure-baseUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-preempt-develUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade kernel-develUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-preemptUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade dtb-mediatekUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade dtb-lgUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade kernel-symsUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade dtb-cavium | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-intelUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-azure | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub