In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: make sure cache entry active before cache_show
The function `c_show` was called with protection from RCU. This only ensures that `cp` will not be freed. Therefore, the reference count for `cp` can drop to zero, which will trigger a refcount use-after-free warning when `cache_get` is called. To resolve this issue, use `cache_get_rcu` to ensure that `cp` remains active.
------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120
Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.233-223.887Upgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernel-tools | Mar 14, 2025 | Dec 27, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade bpftoolUpgrade perfUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Apr 11, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Mar 19, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftool | Apr 1, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 27, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-awsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-oem-24.04aUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-raspi2Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-intelUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04dUpgrade linux-image-ibmUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-generic-hwe-20.04 | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub