Kernel: null pointer dereference vulnerability in ida_free in lib/idr.c
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 6 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected | — |
Configuration 1 [-]
|
Configuration 2 [-]
|
Configuration 3 [-]
|
Configuration 4 [-]
|
Configuration 5 [-]
|
Configuration 6 [-]
|
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | |||
| kernel-rt-0:4.18.0-553.rt7.342.el8_10 | cpe:/a:redhat:enterprise_linux:8::nfv | RHSA-2024:2950 | 2024-05-22T00:00:00Z |
| kernel-0:4.18.0-553.el8_10 | cpe:/o:redhat:enterprise_linux:8 | RHSA-2024:3138 | 2024-05-22T00:00:00Z |
| Red Hat Enterprise Linux 9 | |||
| kernel-0:5.14.0-427.13.1.el9_4 | cpe:/a:redhat:enterprise_linux:9 | RHSA-2024:2394 | 2024-04-30T00:00:00Z |
| kernel-0:5.14.0-427.13.1.el9_4 | cpe:/o:redhat:enterprise_linux:9 | RHSA-2024:2394 | 2024-04-30T00:00:00Z |
No data available yet.
Vendor Workaround
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-3841-1 | linux-5.10 security update |
EUVD |
EUVD-2023-59114 | A Null pointer dereference problem was found in ida_free in lib/idr.c in the Linux Kernel. This issue may allow an attacker using this library to cause a denial of service problem due to a missing check at a function return. |
Ubuntu USN |
USN-6648-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-6648-2 | Linux kernel (Azure) vulnerabilities |
Ubuntu USN |
USN-6650-1 | Linux kernel (OEM) vulnerability |
Ubuntu USN |
USN-6651-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-6651-2 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-6651-3 | Linux kernel (StarFive) vulnerabilities |
Ubuntu USN |
USN-6652-1 | Linux kernel (Azure) vulnerabilities |
Ubuntu USN |
USN-6653-1 | Linux kernel vulnerabilities |
Ubuntu USN |
USN-6653-2 | Linux kernel (AWS) vulnerabilities |
Ubuntu USN |
USN-6653-3 | Linux kernel (Low Latency) vulnerabilities |
Ubuntu USN |
USN-6653-4 | Linux kernel (GKE) vulnerabilities |
Ubuntu USN |
USN-6740-1 | Linux kernel vulnerabilities |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.278% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel Els
|
|
| CPEs | cpe:/o:redhat:enterprise_linux:7 |
cpe:/o:redhat:rhel_els:6 cpe:/o:redhat:rhel_els:7 |
| Vendors & Products |
Redhat rhel Els
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Debian
Debian debian Linux Redhat codeready Linux Builder Redhat codeready Linux Builder For Arm64 Redhat codeready Linux Builder For Eus Redhat codeready Linux Builder For Ibm Z Systems Redhat codeready Linux Builder For Ibm Z Systems Eus Redhat codeready Linux Builder For Power Little Endian Redhat codeready Linux Builder For Power Little Endian Els Redhat codeready Linux Builder For Power Little Endian Eus Redhat enterprise Linux Eus Redhat enterprise Linux For Els Redhat enterprise Linux For Ibm Z Systems Redhat enterprise Linux For Ibm Z Systems Els Redhat enterprise Linux For Ibm Z Systems Eus Redhat enterprise Linux For Power Little Endian Redhat enterprise Linux For Power Little Endian Els Redhat enterprise Linux For Power Little Endian Eus Redhat enterprise Linux For Real Time Redhat enterprise Linux For Real Time For Nfv Redhat enterprise Linux Server Aus Redhat enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Redhat enterprise Linux Update Services For Sap Solutions |
|
| CPEs | cpe:2.3:o:linux:linux_kernel:6.7:rc8:*:*:*:*:*:* |
cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:aarch64:* cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:8.0_aarch64:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:arm64:* cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:x64:* cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.6:*:*:*:*:*:arm64:* cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.6:*:*:*:*:*:x64:* cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.8:*:*:*:*:*:arm64:* cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.8:*:*:*:*:*:x64:* cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.8_s390x:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_els:8.10:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:* cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.8_ppc64le:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:arm64:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:x86:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:arm64:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:x86:* cpe:2.3:o:redhat:enterprise_linux:9.4:*:*:*:*:*:arm64:* cpe:2.3:o:redhat:enterprise_linux:9.6:*:*:*:*:*:arm64:* cpe:2.3:o:redhat:enterprise_linux:9.8:*:*:*:*:*:arm64:* cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:arm64:* cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:arm64:* cpe:2.3:o:redhat:enterprise_linux_eus:9.8:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:9.8:*:*:*:*:*:arm64:* cpe:2.3:o:redhat:enterprise_linux_for_els:8.10:*:*:*:*:*:arm64:* cpe:2.3:o:redhat:enterprise_linux_for_els:8.10:*:*:*:*:*:x64:* cpe:2.3:o:redhat:enterprise_linux_for_els:9.4:*:*:*:*:*:arm64:* cpe:2.3:o:redhat:enterprise_linux_for_els:9.4:*:*:*:*:*:x64:* cpe:2.3:o:redhat:enterprise_linux_for_els:9.6:*:*:*:*:*:arm64:* cpe:2.3:o:redhat:enterprise_linux_for_els:9.6:*:*:*:*:*:x64:* cpe:2.3:o:redhat:enterprise_linux_for_els:9.8:*:*:*:*:*:arm64:* cpe:2.3:o:redhat:enterprise_linux_for_els:9.8:*:*:*:*:*:x64:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.4_s390x:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.6_s390x:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.8_s390x:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:8.10:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_els:9.8:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.8_s390x:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_els:9.8:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.8:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_real_time:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.6_ppc64le:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.8:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.8:*:*:*:*:*:*:* |
| Vendors & Products |
Debian
Debian debian Linux Redhat codeready Linux Builder Redhat codeready Linux Builder For Arm64 Redhat codeready Linux Builder For Eus Redhat codeready Linux Builder For Ibm Z Systems Redhat codeready Linux Builder For Ibm Z Systems Eus Redhat codeready Linux Builder For Power Little Endian Redhat codeready Linux Builder For Power Little Endian Els Redhat codeready Linux Builder For Power Little Endian Eus Redhat enterprise Linux Eus Redhat enterprise Linux For Els Redhat enterprise Linux For Ibm Z Systems Redhat enterprise Linux For Ibm Z Systems Els Redhat enterprise Linux For Ibm Z Systems Eus Redhat enterprise Linux For Power Little Endian Redhat enterprise Linux For Power Little Endian Els Redhat enterprise Linux For Power Little Endian Eus Redhat enterprise Linux For Real Time Redhat enterprise Linux For Real Time For Nfv Redhat enterprise Linux Server Aus Redhat enterprise Linux Server For Power Little Endian Update Services For Sap Solutions Redhat enterprise Linux Update Services For Sap Solutions |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|