In the Linux kernel, the following vulnerability has been resolved:
ata: libata-core: Fix null pointer dereference on error
If the ata_port_alloc() call in ata_host_alloc() fails, ata_host_release() will get called.
However, the code in ata_host_release() tries to free ata_port struct members unconditionally, which can lead to the following:
BUG: unable to handle page fault for address: 0000000000003990 PGD 0 P4D 0 Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI CPU: 10 PID: 594 Comm: (udev-worker) Not tainted 6.10.0-rc5 #44 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:ata_host_release.cold+0x2f/0x6e [libata] Code: e4 4d 63 f4 44 89 e2 48 c7 c6 90 ad 32 c0 48 c7 c7 d0 70 33 c0 49 83 c6 0e 41 RSP: 0018:ffffc90000ebb968 EFLAGS: 00010246 RAX: 0000000000000041 RBX: ffff88810fb52e78 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff88813b3218c0 RDI: ffff88813b3218c0 RBP: ffff88810fb52e40 R08: 0000000000000000 R09: 6c65725f74736f68 R10: ffffc90000ebb738 R11: 73692033203a746e R12: 0000000000000004 R13: 0000000000000000 R14: 0000000000000011 R15: 0000000000000006 FS: 00007f6cc55b9980(0000) GS:ffff88813b300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000003990 CR3: 00000001122a2000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> ? __die_body.cold+0x19/0x27 ? page_fault_oops+0x15a/0x2f0 ? exc_page_fault+0x7e/0x180 ? asm_exc_page_fault+0x26/0x30 ? ata_host_release.cold+0x2f/0x6e [libata] ? ata_host_release.cold+0x2f/0x6e [libata] release_nodes+0x35/0xb0 devres_release_group+0x113/0x140 ata_host_alloc+0xed/0x120 [libata] ata_host_alloc_pinfo+0x14/0xa0 [libata] ahci_init_one+0x6c9/0xd20 [ahci]
Do not access ata_port struct members unconditionally.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-livepatch-5.15.166-111.163Upgrade kernelUpgrade kernel-livepatch-5.10.225-213.878Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-tools | Sep 19, 2024 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftool | Oct 9, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Nov 26, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 21, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-docsUpgrade kernel-default-develUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-manUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade kernel-debug-vdsoUpgrade kernel-azure-baseUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-rockchip | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-awsUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-20.04dUpgrade linux-image-ibm-classicUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1017-nvidia-lowlatency | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub