REDHAT-BUG-2320254: Use After Free
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix use-after-free in bpfuprobemultilinkattach()
If bpflinkprime() fails, bpfuprobemultilinkattach() goes to the errorfree label and frees the array of bpfuprobe's without calling bpfuprobeunregister().
This leaks bpfuprobe->uprobe and worse, this frees bpfuprobe->consumer without removing it from the uprobe->consumers list.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2320254?
The severity of REDHAT-BUG-2320254 is classified as important due to the potential for a use-after-free vulnerability in the Linux kernel.
How do I fix REDHAT-BUG-2320254?
To fix REDHAT-BUG-2320254, update your Linux kernel to the latest version where this vulnerability has been addressed.
What systems are affected by REDHAT-BUG-2320254?
REDHAT-BUG-2320254 affects systems running the Linux Kernel, particularly those using Red Hat's kernel development packages.
What is a use-after-free vulnerability in the context of REDHAT-BUG-2320254?
In the context of REDHAT-BUG-2320254, a use-after-free vulnerability occurs when a program continues to use memory after it has been freed, potentially allowing for arbitrary code execution.
Is there a workaround for REDHAT-BUG-2320254?
Currently, there are no recommended workarounds for REDHAT-BUG-2320254; applying the kernel update is the primary method of mitigation.