In the Linux kernel, the following vulnerability has been resolved:
s390/ptrace: handle setting of fpc register correctly
If the content of the floating point control (fpc) register of a traced process is modified with the ptrace interface the new value is tested for validity by temporarily loading it into the fpc register.
This may lead to corruption of the fpc register of the tracing process: if an interrupt happens while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space and will be loaded into fp/vx registers when returning to user space.
test_fp_ctl() restores the original user space fpc register value, however it will be discarded, when returning to user space.
In result the tracer will incorrectly continue to run with the value that was supposed to be used for the traced process.
Fix this by saving fpu register contents with save_fpu_regs() before using test_fp_ctl().
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade perfUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-headers | Jun 6, 2024 | Mar 6, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Jun 26, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jul 1, 2024 | Mar 6, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Mar 6, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 6, 2024 | Mar 6, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-cross-headersUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modules-extra | Jun 17, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade kernel-azure-baseUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade kernel-debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade dtb-amdUpgrade dtb-broadcomUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade kernel-develUpgrade kernel-macrosUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade dtb-exynosUpgrade dtb-socionextUpgrade kernel-default-manUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch | Apr 18, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1036-iotUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-laptop-23.10Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-intel-iotgUpgrade linux-image-raspi2Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-oem-20.04cUpgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.5.0-1022-azure-fde | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub