In the Linux kernel, the following vulnerability has been resolved:
PCI: Fix reset_method_store() memory leak
In reset_method_store(), a string is allocated via kstrndup() and assigned to the local "options". options is then used in with strsep() to find spaces:
while ((name = strsep(&options, " ")) != NULL) {
If there are no remaining spaces, then options is set to NULL by strsep(), so the subsequent kfree(options) doesn't free the memory allocated via kstrndup().
Fix by using a separate tmp_options to iterate with strsep() so options is preserved.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perf | Mar 14, 2025 | Dec 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-6.1.124-134.200Upgrade perf-debuginfoUpgrade kernel-headers | Mar 27, 2025 | Dec 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 29, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-fipsUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-intelUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1084-azureUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-raspi | Feb 20, 2025 | Dec 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub