In the Linux kernel, the following vulnerability has been resolved:
vt_ioctl: fix array_index_nospec in vt_setactivate
array_index_nospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console should be decreased first and then sanitized with array_index_nospec.
Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-doc | Sep 26, 2024 | Jul 16, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.102-99.473Upgrade python-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-livepatch-4.14.268-205.500Upgrade kernel-debuginfo-common-aarch64 | Aug 19, 2024 | Jul 16, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 8, 2024 | Jul 16, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 16, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Jul 16, 2024 |
| Rocky_linux | — | Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-debug | Oct 2, 2024 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-gcp-4.15Upgrade linux-ibm-5.4Upgrade linux-iotUpgrade linux-azureUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-hweUpgrade linux-raspi-5.4Upgrade linux-azure-4.15Upgrade linux-azure-5.4Upgrade linuxUpgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-azure-fde-5.15Upgrade linux-ibmUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-aws-hwe | Nov 19, 2024 | Jul 16, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jul 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub