vulnerability

Oracle Linux: CVE-2019-25162: ELSA-2024-3618: kernel update (MODERATE) (Multiple Advisories)

Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
02/26/2024
Added
06/06/2024
Modified
11/29/2024

Description

In the Linux kernel, the following vulnerability has been resolved:
i2c: Fix a potential use after free
Free the adap structure only after we are done using it.
This patch just moves the put_device() down a bit to avoid the
use after free.
[wsa: added comment to the code, added Fixes tag]
An out-of-bounds (OOB) memory access flaw was found in the i2c driver module in the Linux kernel.

Solution

oracle-linux-upgrade-kernel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.