In the Linux kernel, the following vulnerability has been resolved:
mtd: require write permissions for locking and badblock ioctls
MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require write permission. Depending on the hardware MEMLOCK might even be write-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK is always write-once.
MEMSETBADBLOCK modifies the bad block table.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade python3-perfUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-coreUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules | Jun 6, 2024 | Feb 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-tools-develUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo | Aug 2, 2024 | Feb 29, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Feb 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jun 6, 2024 | Feb 29, 2024 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade bpftoolUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel | Jun 17, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade kernel-preempt-develUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-syms | Aug 9, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-genericUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-4.4.0-261-lowlatencyUpgrade linux-image-awsUpgrade linux-image-4.4.0-261-genericUpgrade linux-image-4.4.0-1176-awsUpgrade linux-image-virtual-lts-xenial | Nov 19, 2024 | Feb 29, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub