References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Change History

https://git.kernel.org/stable/c/34cf99c250d5cd2530b93a57b0de31d3aaf8685b

https://git.kernel.org/stable/c/d2dfbc0e3b7a04c2d941421a958dc31c897fb204

https://git.kernel.org/stable/c/eef16bfdb212da60f5144689f2967fb25b051a2b

CISA-ADP AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA-ADP CWE-416

In the Linux kernel, the following vulnerability has been resolved:

x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()

The code calling ima_free_kexec_buffer() runs long after the memblock
allocator has already been torn down, potentially resulting in a use
after free in memblock_isolate_range().

With KASAN or KFENCE, this use after free will result in a BUG
from the idle task, and a subsequent kernel panic.

Switch ima_free_kexec_buffer() over to memblock_free_late() t

Linux https://git.kernel.org/stable/c/34cf99c250d5cd2530b93a57b0de31d3aaf8685b [No types assigned]

Linux https://git.kernel.org/stable/c/d2dfbc0e3b7a04c2d941421a958dc31c897fb204 [No types assigned]

Linux https://git.kernel.org/stable/c/eef16bfdb212da60f5144689f2967fb25b051a2b [No types assigned]