In the Linux kernel, the following vulnerability has been resolved:
net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
In lan78xx_probe(), the buffer `buf` was being freed twice: once implicitly through `usb_free_urb(dev->urb_intr)` with the `URB_FREE_BUFFER` flag and again explicitly by `kfree(buf)`. This caused a double free issue.
To resolve this, reordered `kmalloc()` and `usb_alloc_urb()` calls to simplify the initialization sequence and removed the redundant `kfree(buf)`. Now, `buf` is allocated after `usb_alloc_urb()`, ensuring it is correctly managed by `usb_fill_int_urb()` and freed by `usb_free_urb()` as intended.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 27, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 15, 2025 | Dec 27, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oem-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-oem-22.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04 | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub