In the Linux kernel, the following vulnerability has been resolved:
net/xen-netback: prevent UAF in xenvif_flush_hash()
During the list_for_each_entry_rcu iteration call of xenvif_flush_hash, kfree_rcu does not exist inside the rcu read critical section, so if kfree_rcu is called when the rcu grace period ends during the iteration, UAF occurs when accessing head->next after the entry becomes free.
Therefore, to solve this, you need to change it to list_for_each_entry_safe.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.227-219.884Upgrade kernelUpgrade kernel-livepatch-4.14.355-275.582Upgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade python-perf | Jan 22, 2025 | Oct 21, 2024 |
| Amazon_linux | — | Upgrade kernel | Feb 6, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.115-126.197Upgrade perf-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-livepatch-6.1.112-124.190Upgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-devel | Feb 17, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Dell Powerstore Dsa2025223 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | May 27, 2025 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1023-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-54-genericUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-intelUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-awsUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-gke-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-gcpUpgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04 | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub