In the Linux kernel, the following vulnerability has been resolved:
net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
In lan78xx_probe(), the buffer `buf` was being freed twice: once implicitly through `usb_free_urb(dev->urb_intr)` with the `URB_FREE_BUFFER` flag and again explicitly by `kfree(buf)`. This caused a double free issue.
To resolve this, reordered `kmalloc()` and `usb_alloc_urb()` calls to simplify the initialization sequence and removed the redundant `kfree(buf)`. Now, `buf` is allocated after `usb_alloc_urb()`, ensuring it is correctly managed by `usb_fill_int_urb()` and freed by `usb_free_urb()` as intended.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 15, 2025 | Dec 27, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-ibmUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-2023-raspi-realtime | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub