In the Linux kernel, the following vulnerability has been resolved: x86/mm, kexec, ima: Use memblockfreelate() from imafreekexecbuffer() The code calling imafreekexecbuffer() runs long after the memblock allocator has already been torn down, potentially resulting in a use after free in memblockisolaterange(). With KASAN or KFENCE, this use after free will result in a BUG from the idle task, and a subsequent kernel panic. Switch imafreekexecbuffer() over to memblockfree_late() to avoid that bug.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "linux-buildinfo-6.5.0-1014-nvidia", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-buildinfo-6.5.0-1014-nvidia-64k", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-headers-6.5.0-1014-nvidia", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-headers-6.5.0-1014-nvidia-64k", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-image-unsigned-6.5.0-1014-nvidia", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-image-unsigned-6.5.0-1014-nvidia-64k", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-image-unsigned-6.5.0-1014-nvidia-64k-dbgsym", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-image-unsigned-6.5.0-1014-nvidia-dbgsym", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-modules-6.5.0-1014-nvidia", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-modules-6.5.0-1014-nvidia-64k", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-modules-extra-6.5.0-1014-nvidia", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-modules-nvidia-fs-6.5.0-1014-nvidia", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-modules-nvidia-fs-6.5.0-1014-nvidia-64k", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-nvidia-6.5-headers-6.5.0-1014", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-nvidia-6.5-tools-6.5.0-1014", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-nvidia-6.5-tools-host", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-tools-6.5.0-1014-nvidia", "binary_version": "6.5.0-1014.14" }, { "binary_name": "linux-tools-6.5.0-1014-nvidia-64k", "binary_version": "6.5.0-1014.14" } ] }