In the Linux kernel, the following vulnerability has been resolved:
mtd: require write permissions for locking and badblock ioctls
MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require write permission. Depending on the hardware MEMLOCK might even be write-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK is always write-once.
MEMSETBADBLOCK modifies the bad block table.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-devel | Jun 6, 2024 | Feb 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfo | Aug 2, 2024 | Feb 29, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Feb 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jun 6, 2024 | Feb 29, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Jun 17, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-syms-azureUpgrade kernel-preempt-develUpgrade kernel-azure-baseUpgrade kernel-preemptUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-64kb | Aug 9, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-4.4.0-261-genericUpgrade linux-image-4.4.0-1176-awsUpgrade linux-image-awsUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-4.4.0-261-lowlatencyUpgrade linux-image-virtual-lts-xenial | Nov 19, 2024 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub