In the Linux kernel, the following vulnerability has been resolved:
can: hi311x: hi3110_can_ist(): fix potential use-after-free
The commit a22bd630cfff ("can: hi311x: do not report txerr and rxerr during bus-off") removed the reporting of rxerr and txerr even in case of correct operation (i. e. not bus-off).
The error count information added to the CAN frame after netif_rx() is a potential use after free, since there is no guarantee that the skb is in the same state. It might be freed or reused.
Fix the issue by postponing the netif_rx() call in case of txerr and rxerr reporting.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-5.4.0-214-lowlatencyUpgrade linux-image-5.15.0-1075-intel-iot-realtimeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-1079-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-4.15.0-1163-kvmUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-1188-azureUpgrade linux-image-5.15.0-1023-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.15.0-1082-realtimeUpgrade linux-image-realtimeUpgrade linux-image-oem-osp1Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-5.15.0-138-generic-lpaeUpgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1149-azureUpgrade linux-image-5.4.0-1149-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1087-azure-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-hweUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.4.0-1142-oracleUpgrade linux-image-5.15.0-1046-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-214-genericUpgrade linux-image-5.15.0-1079-gkeUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-4.15.0-1180-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1035-nvidia-tegraUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1078-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-4.15.0-2081-gcp-fipsUpgrade linux-image-5.15.0-1064-gkeopUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-4.15.0-1135-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.4.0-1062-xilinx-zynqmpUpgrade linux-image-5.4.0-1147-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1076-nvidia-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1049-iotUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.4.0-1118-fipsUpgrade linux-image-5.15.0-1087-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-kvmUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-5.15.0-1076-nvidiaUpgrade linux-image-5.15.0-138-lowlatency-64kUpgrade linux-image-5.15.0-1035-nvidia-tegra-rtUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-5.4.0-1144-awsUpgrade linux-image-5.15.0-138-genericUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.4.0-1131-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1142-oracleUpgrade linux-image-oemUpgrade linux-image-5.15.0-1076-raspiUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1103-bluefieldUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1144-aws-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1082-aws-fipsUpgrade linux-image-4.15.0-237-lowlatencyUpgrade linux-image-4.15.0-2118-aws-fipsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-4.15.0-1173-gcpUpgrade linux-image-5.4.0-1147-gcp-fipsUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-138-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-5.15.0-1082-awsUpgrade linux-image-4.15.0-2097-azure-fipsUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-4.15.0-237-genericUpgrade linux-image-5.15.0-138-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1023-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1087-azureUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-1017-oemUpgrade linux-image-5.4.0-214-generic-lpaeUpgrade linux-image-5.15.0-138-fipsUpgrade linux-image-5.15.0-1081-gcp-fips | Mar 28, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub