REDHAT-BUG-2360223: Use After Free

Published Apr 16, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

drm/vkms: Fix use after free and double free on init error

If the driver initialization fails, the vkmsexit() function might access an uninitialized or freed defaultconfig pointer and it might double free it.

Fix both possible errors by initializing defaultconfig only when the driver initialization succeeded.

Affected Software

1 affected component

Linux Foundation Linux Kernel

Event History

Apr 16, 2025

Data Sourced

via Red Hat·03:03 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2360223?

The severity of REDHAT-BUG-2360223 is considered to be high due to the potential for use after free and double free vulnerabilities in the Linux kernel.

How do I fix REDHAT-BUG-2360223?

To fix REDHAT-BUG-2360223, update your Linux kernel to the latest version as per provided patches and advisories.

What systems are affected by REDHAT-BUG-2360223?

Systems running affected versions of the Linux kernel with the vkms driver are susceptible to the vulnerabilities identified in REDHAT-BUG-2360223.

What are the risks associated with REDHAT-BUG-2360223?

The risks associated with REDHAT-BUG-2360223 include potential system crashes and exploitability leading to unauthorized access or denial of service.

Is there a workaround for REDHAT-BUG-2360223?

Currently, the recommended course of action for REDHAT-BUG-2360223 is to apply the security updates rather than relying on workarounds.