In the Linux kernel, the following vulnerability has been resolved:
can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
This issue is similar to the vulnerability in the `mcp251x` driver, which was fixed in commit 03c427147b2d ("can: mcp251x: fix resume from sleep before interface was brought up").
In the `hi311x` driver, when the device resumes from sleep, the driver schedules `priv->restart_work`. However, if the network interface was not previously enabled, the `priv->wq` (workqueue) is not allocated and initialized, leading to a null pointer dereference.
To fix this, we move the allocation and initialization of the workqueue from the `hi3110_open` function to the `hi3110_can_probe` function. This ensures that the workqueue is properly initialized before it is used during device resume. And added logic to destroy the workqueue in the error handling paths of `hi3110_can_probe` and in the `hi3110_can_remove` function to prevent resource leaks.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 13, 2025 | Nov 13, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-gke-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-genericUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-gcpUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8 | Nov 13, 2025 | Nov 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Nov 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub