In the Linux kernel, the following vulnerability has been resolved:
PCI: endpoint: Fix configfs group list head handling
Doing a list_del() on the epf_group field of struct pci_epf_driver in pci_epf_remove_cfs() is not correct as this field is a list head, not a list entry. This list_del() call triggers a KASAN warning when an endpoint function driver which has a configfs attribute group is torn down:
================================================================== BUG: KASAN: slab-use-after-free in pci_epf_remove_cfs+0x17c/0x198 Write of size 8 at addr ffff00010f4a0d80 by task rmmod/319
CPU: 3 UID: 0 PID: 319 Comm: rmmod Not tainted 6.16.0-rc2 #1 NONE Hardware name: Radxa ROCK 5B (DT) Call trace: show_stack+0x2c/0x84 (C) dump_stack_lvl+0x70/0x98 print_report+0x17c/0x538 kasan_report+0xb8/0x190 __asan_report_store8_noabort+0x20/0x2c pci_epf_remove_cfs+0x17c/0x198 pci_epf_unregister_driver+0x18/0x30 nvmet_pci_epf_cleanup_module+0x24/0x30 [nvmet_pci_epf] __arm64_sys_delete_module+0x264/0x424 invoke_syscall+0x70/0x260 el0_svc_common.constprop.0+0xac/0x230 do_el0_svc+0x40/0x58 el0_svc+0x48/0xdc el0t_64_sync_handler+0x10c/0x138 el0t_64_sync+0x198/0x19c ...
Remove this incorrect list_del() call from pci_epf_remove_cfs().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.191-132.213Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-livepatch-5.10.242-239.961Upgrade perf-debuginfoUpgrade kernel-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12Upgrade kernel6.12-libbpf-develUpgrade kernel-headersUpgrade bpftool6.12Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-headersUpgrade kernel-toolsUpgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.150-174.273Upgrade kernel-develUpgrade bpftoolUpgrade kernel-libbpfUpgrade bpftool6.12-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perfUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.12.46-66.121Upgrade python3-perfUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-tools-develUpgrade kernel6.12-libbpfUpgrade kernel6.12-develUpgrade python3-perf-debuginfoUpgrade perf6.12-debuginfo | Sep 30, 2025 | Sep 11, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 14, 2025 | Sep 11, 2025 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kernel-develUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-apmUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-rtUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-defaultUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rt | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-kvmUpgrade linux-image-gcp-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-xilinxUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-64k-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-oracleUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-lowlatency-5.15Upgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-5.15Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeopUpgrade linux-image-gke-5.15 | Dec 5, 2025 | Sep 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub