In the Linux kernel, the following vulnerability has been resolved:
coresight: ETR: Fix ETR buffer use-after-free issue
When ETR is enabled as CS_MODE_SYSFS, if the buffer size is changed and enabled again, currently sysfs_buf will point to the newly allocated memory(buf_new) and free the old memory(buf_old). But the etr_buf that is being used by the ETR remains pointed to buf_old, not updated to buf_new. In this case, it will result in a memory use-after-free issue.
Fix this by checking ETR's mode before updating and releasing buf_old, if the mode is CS_MODE_SYSFS, then skip updating and releasing it.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-oracle-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-19-genericUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-generic-6.17Upgrade linux-image-aws-64kUpgrade linux-image-6.17.0-1017-oemUpgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-aws-6.17Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-6.17Upgrade linux-image-virtual-6.17Upgrade linux-image-generic-64k-6.17Upgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-raspi-6.17Upgrade linux-image-oem-6.17Upgrade linux-image-oem-24.04cUpgrade linux-image-raspiUpgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-aws-64k-6.17Upgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-oem-24.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-6.17.0-1010-azureUpgrade linux-image-azureUpgrade linux-image-realtime-6.17Upgrade linux-image-gcpUpgrade linux-image-6.17.0-1009-awsUpgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-gcp-64k | Mar 17, 2026 | Dec 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub