In the Linux kernel, the following vulnerability has been resolved:
can: hi311x: hi3110_can_ist(): fix potential use-after-free
The commit a22bd630cfff ("can: hi311x: do not report txerr and rxerr during bus-off") removed the reporting of rxerr and txerr even in case of correct operation (i. e. not bus-off).
The error count information added to the CAN frame after netif_rx() is a potential use after free, since there is no guarantee that the skb is in the same state. It might be freed or reused.
Fix the issue by postponing the netif_rx() call in case of txerr and rxerr reporting.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1035-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1144-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1131-kvmUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-138-genericUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1082-aws-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-138-generic-64kUpgrade linux-image-5.4.0-1103-bluefieldUpgrade linux-image-5.15.0-1076-raspiUpgrade linux-image-oemUpgrade linux-image-5.15.0-1023-nvidia-tegra-igxUpgrade linux-image-oem-24.04Upgrade linux-image-4.15.0-237-genericUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intelUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1087-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-4.15.0-2097-azure-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-237-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1147-gcp-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1076-nvidiaUpgrade linux-image-5.15.0-138-fipsUpgrade linux-image-5.4.0-214-generic-lpaeUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1082-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1144-aws-fipsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-4.15.0-1173-gcpUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-2118-aws-fipsUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-5.15.0-138-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.15.0-138-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-4.15.0-1142-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1081-gcp-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1076-nvidia-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-4.15.0-1188-azureUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-4.15.0-1180-awsUpgrade linux-image-5.15.0-1087-azure-fdeUpgrade linux-image-5.15.0-1078-kvmUpgrade linux-image-5.15.0-1079-gkeUpgrade linux-image-5.15.0-1075-intel-iot-realtimeUpgrade linux-image-5.15.0-1079-oracleUpgrade linux-image-5.15.0-1035-nvidia-tegraUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-5.4.0-214-genericUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1142-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-138-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-5.15.0-1087-azure-fipsUpgrade linux-image-aws-hweUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1046-xilinx-zynqmpUpgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-214-lowlatencyUpgrade linux-image-5.4.0-1049-iotUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-awsUpgrade linux-image-5.4.0-1147-gcpUpgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-4.15.0-2081-gcp-fipsUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1062-xilinx-zynqmpUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-bluefieldUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-4.15.0-1135-fipsUpgrade linux-image-5.15.0-1064-gkeopUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.4.0-1149-azure-fipsUpgrade linux-image-4.15.0-1163-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.4.0-1149-azureUpgrade linux-image-5.4.0-1118-fipsUpgrade linux-image-5.15.0-1082-realtimeUpgrade linux-image-5.15.0-1023-nvidia-tegra-igx-rt | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub