In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: make sure cache entry active before cache_show
The function `c_show` was called with protection from RCU. This only ensures that `cp` will not be freed. Therefore, the reference count for `cp` can drop to zero, which will trigger a refcount use-after-free warning when `cache_get` is called. To resolve this issue, use `cache_get_rcu` to ensure that `cp` remains active.
------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 7 PID: 822 at lib/refcount.c:25 refcount_warn_saturate+0xb1/0x120 CPU: 7 UID: 0 PID: 822 Comm: cat Not tainted 6.12.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:refcount_warn_saturate+0xb1/0x120
Call Trace: <TASK> c_show+0x2fc/0x380 [sunrpc] seq_read_iter+0x589/0x770 seq_read+0x1e5/0x270 proc_reg_read+0xe1/0x140 vfs_read+0x125/0x530 ksys_read+0xc1/0x160 do_syscall_64+0x5f/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.10.233-223.887Upgrade kernel-devel | Mar 14, 2025 | Dec 27, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-headers | Mar 27, 2025 | Dec 27, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Apr 11, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelists | Mar 19, 2025 | Dec 27, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Apr 1, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 27, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 15, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-211-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-oemUpgrade linux-image-gkeop-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-azure-fdeUpgrade linux-image-fipsUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.4.0-1142-aws | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub