In the Linux kernel, the following vulnerability has been resolved:
i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
In dw_i3c_common_probe, &master->hj_work is bound with dw_i3c_hj_work. And dw_i3c_master_irq_handler can call dw_i3c_master_irq_handle_ibis function to start the work.
If we remove the module which will call dw_i3c_common_remove to make cleanup, it will free master->base through i3c_master_unregister while the work mentioned above will be used. The sequence of operations that may lead to a UAF bug is as follows:
CPU0 CPU1
| dw_i3c_hj_work dw_i3c_common_remove | i3c_master_unregister(&master->base) | device_unregister(&master->dev) | device_release | //free master->base | | i3c_master_do_daa(&master->base) | //use master->base
Fix it by ensuring that the work is canceled before proceeding with the cleanup in dw_i3c_common_remove.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Jan 27, 2026 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-uki-virtUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade rvUpgrade kernel-zfcpdumpUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade perfUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-debugUpgrade libperf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-debuginfoUpgrade libperfUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extra | Feb 5, 2026 | Nov 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-raspiUpgrade linux-image-raspi-realtimeUpgrade linux-image-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-6.8Upgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-ibm-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-gcpUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtimeUpgrade linux-image-genericUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-lowlatency-64k-6.8 | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub