In the Linux kernel, the following vulnerability has been resolved:
userfaultfd: fix a race between writeprotect and exit_mmap()
A race is possible when a process exits, its VMAs are removed by exit_mmap() and at the same time userfaultfd_writeprotect() is called.
The race was detected by KASAN on a development kernel, but it appears to be possible on vanilla kernels as well.
Use mmget_not_zero() to prevent the race as done in other userfaultfd operations.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-modules-extra | Aug 12, 2024 | May 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-headers | Apr 25, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extra | Aug 22, 2024 | May 22, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-hisiliconUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade dtb-freescaleUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade kernel-debugUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-symsUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-debug-develUpgrade kernel-devel-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-lgUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-source-rt | Aug 9, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub