In the Linux kernel, the following vulnerability has been resolved:
net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
In lan78xx_probe(), the buffer `buf` was being freed twice: once implicitly through `usb_free_urb(dev->urb_intr)` with the `URB_FREE_BUFFER` flag and again explicitly by `kfree(buf)`. This caused a double free issue.
To resolve this, reordered `kmalloc()` and `usb_alloc_urb()` calls to simplify the initialization sequence and removed the redundant `kfree(buf)`. Now, `buf` is allocated after `usb_alloc_urb()`, ensuring it is correctly managed by `usb_fill_int_urb()` and freed by `usb_free_urb()` as intended.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 15, 2025 | Dec 27, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | May 15, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04b | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub