Rocky Linux: CVE-2024-26801: kernel-rt (Multiple Advisories)
Description
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Avoid potential use-after-free in hci_error_reset While handling the HCI_EV_HARDWARE_ERROR event, if the underlying BT controller is not responding, the GPIO reset mechanism would free the hci_dev and lead to a use-after-free in hci_error_reset. Here's the call trace observed on a ChromeOS device with Intel AX201: queue_work_on+0x3e/0x6c __hci_cmd_sync_sk+0x2ee/0x4c0 [bluetooth <HASH:3b4a6>] ? init_wait_entry+0x31/0x31 __hci_cmd_sync+0x16/0x20 [bluetooth <HASH:3b4a 6>] hci_error_reset+0x4f/0xa4 [bluetooth <HASH:3b4a 6>] process_one_work+0x1d8/0x33f worker_thread+0x21b/0x373 kthread+0x13a/0x152 ? pr_cont_work+0x54/0x54 ? kthread_blkcg+0x31/0x31 ret_from_fork+0x1f/0x30 This patch holds the reference count on the hci_dev while processing a HCI_EV_HARDWARE_ERROR event to avoid potential crash.
Solution(s)
- rocky-upgrade-bpftool
- rocky-upgrade-bpftool-debuginfo
- rocky-upgrade-kernel
- rocky-upgrade-kernel-64k
- rocky-upgrade-kernel-64k-core
- rocky-upgrade-kernel-64k-debug
- rocky-upgrade-kernel-64k-debug-core
- rocky-upgrade-kernel-64k-debug-debuginfo
- rocky-upgrade-kernel-64k-debug-devel
- rocky-upgrade-kernel-64k-debug-devel-matched
- rocky-upgrade-kernel-64k-debug-modules
- rocky-upgrade-kernel-64k-debug-modules-core
- rocky-upgrade-kernel-64k-debug-modules-extra
- rocky-upgrade-kernel-64k-debuginfo
- rocky-upgrade-kernel-64k-devel
- rocky-upgrade-kernel-64k-devel-matched
- rocky-upgrade-kernel-64k-modules
- rocky-upgrade-kernel-64k-modules-core
- rocky-upgrade-kernel-64k-modules-extra
- rocky-upgrade-kernel-abi-stablelists
- rocky-upgrade-kernel-core
- rocky-upgrade-kernel-cross-headers
- rocky-upgrade-kernel-debug
- rocky-upgrade-kernel-debug-core
- rocky-upgrade-kernel-debug-debuginfo
- rocky-upgrade-kernel-debug-devel
- rocky-upgrade-kernel-debug-devel-matched
- rocky-upgrade-kernel-debug-modules
- rocky-upgrade-kernel-debug-modules-core
- rocky-upgrade-kernel-debug-modules-extra
- rocky-upgrade-kernel-debug-uki-virt
- rocky-upgrade-kernel-debuginfo
- rocky-upgrade-kernel-debuginfo-common-aarch64
- rocky-upgrade-kernel-debuginfo-common-x86_64
- rocky-upgrade-kernel-devel
- rocky-upgrade-kernel-devel-matched
- rocky-upgrade-kernel-doc
- rocky-upgrade-kernel-headers
- rocky-upgrade-kernel-modules
- rocky-upgrade-kernel-modules-core
- rocky-upgrade-kernel-modules-extra
- rocky-upgrade-kernel-rt
- rocky-upgrade-kernel-rt-core
- rocky-upgrade-kernel-rt-debug
- rocky-upgrade-kernel-rt-debug-core
- rocky-upgrade-kernel-rt-debug-debuginfo
- rocky-upgrade-kernel-rt-debug-devel
- rocky-upgrade-kernel-rt-debug-kvm
- rocky-upgrade-kernel-rt-debug-modules
- rocky-upgrade-kernel-rt-debug-modules-core
- rocky-upgrade-kernel-rt-debug-modules-extra
- rocky-upgrade-kernel-rt-debuginfo
- rocky-upgrade-kernel-rt-debuginfo-common-x86_64
- rocky-upgrade-kernel-rt-devel
- rocky-upgrade-kernel-rt-kvm
- rocky-upgrade-kernel-rt-modules
- rocky-upgrade-kernel-rt-modules-core
- rocky-upgrade-kernel-rt-modules-extra
- rocky-upgrade-kernel-tools
- rocky-upgrade-kernel-tools-debuginfo
- rocky-upgrade-kernel-tools-libs
- rocky-upgrade-kernel-tools-libs-devel
- rocky-upgrade-kernel-uki-virt
- rocky-upgrade-kernel-zfcpdump
- rocky-upgrade-kernel-zfcpdump-core
- rocky-upgrade-kernel-zfcpdump-debuginfo
- rocky-upgrade-kernel-zfcpdump-devel
- rocky-upgrade-kernel-zfcpdump-devel-matched
- rocky-upgrade-kernel-zfcpdump-modules
- rocky-upgrade-kernel-zfcpdump-modules-core
- rocky-upgrade-kernel-zfcpdump-modules-extra
- rocky-upgrade-libperf
- rocky-upgrade-libperf-debuginfo
- rocky-upgrade-perf
- rocky-upgrade-perf-debuginfo
- rocky-upgrade-python3-perf
- rocky-upgrade-python3-perf-debuginfo
- rocky-upgrade-rtla
- rocky-upgrade-rv
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center