In the Linux kernel, the following vulnerability has been resolved:
epoll: be better about file lifetimes
epoll can call out to vfs_poll() with a file pointer that may race with the last 'fput()'. That would make f_count go down to zero, and while the ep->mtx locking means that the resulting file pointer tear-down will be blocked until the poll returns, it means that f_count is already dead, and any use of it won't actually get a reference to the file any more: it's dead regardless.
Make sure we have a valid ref on the file pointer before we call down to vfs_poll() from the epoll routines.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-docUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-coreUpgrade bpftoolUpgrade python3-perfUpgrade kernel-64k-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade libperfUpgrade kernel-64k-debug-modules-extraUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-coreUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools | Nov 4, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-livepatch-5.15.161-106.159Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfo | May 22, 2025 | Jun 19, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Jun 11, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade rtlaUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-devel-matchedUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-modulesUpgrade libperfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade rvUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-debug-debuginfoUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-core | Aug 1, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-64kbUpgrade dtb-amazonUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade kernel-azure-baseUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade cluster-md-kmp-64kb | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-gcp-lts-22.04 | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub