In the Linux kernel, the following vulnerability has been resolved:
media: venus: fix use after free in vdec_close
There appears to be a possible use after free with vdec_close(). The firmware will add buffer release work to the work queue through HFI callbacks as a normal part of decoding. Randomly closing the decoder device from userspace during normal decoding can incur a read after free for inst.
Fix it by cancelling the work in vdec_close.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-rt-develUpgrade dtb-freescaleUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade kernel-azure-livepatch-develUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade kernel-develUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-debug-develUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-docsUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade dtb-armUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-default | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-oem-24.04aUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oemUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidia-lowlatency | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub