In the Linux kernel, the following vulnerability has been resolved:
um: ubd: Do not use drvdata in release
The drvdata is not available in release. Let's just use container_of() to get the ubd instance. Otherwise, removing a ubd device will result in a crash:
RIP: 0033:blk_mq_free_tag_set+0x1f/0xba RSP: 00000000e2083bf0 EFLAGS: 00010246 RAX: 000000006021463a RBX: 0000000000000348 RCX: 0000000062604d00 RDX: 0000000004208060 RSI: 00000000605241a0 RDI: 0000000000000348 RBP: 00000000e2083c10 R08: 0000000062414010 R09: 00000000601603f7 R10: 000000000000133a R11: 000000006038c4bd R12: 0000000000000000 R13: 0000000060213a5c R14: 0000000062405d20 R15: 00000000604f7aa0 Kernel panic - not syncing: Segfault with no mm CPU: 0 PID: 17 Comm: kworker/0:1 Not tainted 6.8.0-rc3-00107-gba3f67c11638 #1 Workqueue: events mc_work_proc Stack: 00000000 604f7ef0 62c5d000 62405d20 e2083c30 6002c776 6002c755 600e47ff e2083c60 6025ffe3 04208060 603d36e0 Call Trace: [<6002c776>] ubd_device_release+0x21/0x55 [<6002c755>] ? ubd_device_release+0x0/0x55 [<600e47ff>] ? kfree+0x0/0x100 [<6025ffe3>] device_release+0x70/0xba [<60381d6a>] kobject_put+0xb5/0xe2 [<6026027b>] put_device+0x19/0x1c [<6026a036>] platform_device_put+0x26/0x29 [<6026ac5a>] platform_device_unregister+0x2c/0x2e [<6002c52e>] ubd_remove+0xb8/0xd6 [<6002bb74>] ? mconsole_reply+0x0/0x50 [<6002b926>] mconsole_remove+0x160/0x1cc [<6002bbbc>] ? mconsole_reply+0x48/0x50 [<6003379c>] ? um_set_signals+0x3b/0x43 [<60061c55>] ? update_min_vruntime+0x14/0x70 [<6006251f>] ? dequeue_task_fair+0x164/0x235 [<600620aa>] ? update_cfs_group+0x0/0x40 [<603a0e77>] ? __schedule+0x0/0x3ed [<60033761>] ? um_set_signals+0x0/0x43 [<6002af6a>] mc_work_proc+0x77/0x91 [<600520b4>] process_scheduled_works+0x1af/0x2c3 [<6004ede3>] ? assign_work+0x0/0x58 [<600527a1>] worker_thread+0x2f7/0x37a [<6004ee3b>] ? set_pf_worker+0x0/0x64 [<6005765d>] ? arch_local_irq_save+0x0/0x2d [<60058e07>] ? kthread_exit+0x0/0x3a [<600524aa>] ? worker_thread+0x0/0x37a [<60058f9f>] kthread+0x130/0x135 [<6002068e>] new_thread_handler+0x85/0xb6
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-raspi2Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-gkeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-oem-24.04aUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-raspi-realtimeUpgrade linux-image-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-oem-22.04c | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub