In the Linux kernel, the following vulnerability has been resolved:
ata: libata-core: Fix null pointer dereference on error
If the ata_port_alloc() call in ata_host_alloc() fails, ata_host_release() will get called.
However, the code in ata_host_release() tries to free ata_port struct members unconditionally, which can lead to the following:
BUG: unable to handle page fault for address: 0000000000003990 PGD 0 P4D 0 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 10 PID: 594 Comm: (udev-worker) Not tainted 6.10.0-rc5 #44 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:ata_host_release.cold+0x2f/0x6e [libata] Code: e4 4d 63 f4 44 89 e2 48 c7 c6 90 ad 32 c0 48 c7 c7 d0 70 33 c0 49 83 c6 0e 41 RSP: 0018:ffffc90000ebb968 EFLAGS: 00010246 RAX: 0000000000000041 RBX: ffff88810fb52e78 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff88813b3218c0 RDI: ffff88813b3218c0 RBP: ffff88810fb52e40 R08: 0000000000000000 R09: 6c65725f74736f68 R10: ffffc90000ebb738 R11: 73692033203a746e R12: 0000000000000004 R13: 0000000000000000 R14: 0000000000000011 R15: 0000000000000006 FS: 00007f6cc55b9980(0000) GS:ffff88813b300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000003990 CR3: 00000001122a2000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> ? __die_body.cold+0x19/0x27 ? page_fault_oops+0x15a/0x2f0 ? exc_page_fault+0x7e/0x180 ? asm_exc_page_fault+0x26/0x30 ? ata_host_release.cold+0x2f/0x6e [libata] ? ata_host_release.cold+0x2f/0x6e [libata] release_nodes+0x35/0xb0 devres_release_group+0x113/0x140 ata_host_alloc+0xed/0x120 [libata] ata_host_alloc_pinfo+0x14/0xa0 [libata] ahci_init_one+0x6c9/0xd20 [ahci]
Do not access ata_port struct members unconditionally.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.166-111.163Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.225-213.878Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headers | Sep 19, 2024 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpf | Feb 17, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Oct 9, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perf | Nov 26, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-rt_debug-develUpgrade dtb-amlogicUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade dtb-qcomUpgrade dtb-lgUpgrade kernel-source-rtUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-source-azureUpgrade dtb-nvidiaUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade dtb-apmUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade dtb-amdUpgrade dtb-sprdUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade dtb-mediatekUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade kernel-default-develUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-64kbUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-debug | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-intelUpgrade linux-image-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04 | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub