In the Linux kernel, the following vulnerability has been resolved:
vt_ioctl: fix array_index_nospec in vt_setactivate
array_index_nospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console should be decreased first and then sanitized with array_index_nospec.
Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade perfUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-modules | Sep 26, 2024 | Jul 16, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-livepatch-4.14.268-205.500Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.102-99.473Upgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Aug 19, 2024 | Jul 16, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Oct 9, 2024 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Oct 8, 2024 | Jul 16, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 16, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Jul 16, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernelUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel | Oct 2, 2024 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-azure-fde-5.15Upgrade linux-aws-5.4Upgrade linux-gkeopUpgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.4Upgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-aws-hweUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-ibm-5.4Upgrade linux-bluefieldUpgrade linux-iotUpgrade linux-raspi-5.4Upgrade linux-azure-4.15Upgrade linuxUpgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-hweUpgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-azure | Nov 19, 2024 | Jul 16, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jul 16, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub