In the Linux kernel, the following vulnerability has been resolved:
vmci: prevent speculation leaks by sanitizing event in event_deliver()
Coverity spotted that event_msg is controlled by user-space, event_msg->event_data.event is passed to event_deliver() and used as an index without sanitization.
This change ensures that the event index is sanitized to mitigate any possibility of speculative information leaks.
This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.
Only compile tested, no access to HW.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-docUpgrade python3-perf | Sep 26, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.162-107.160Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.350-266.564Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade perf | Oct 16, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 17, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Oct 9, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-toolsUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64 | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-rt-develUpgrade dtb-caviumUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade dtb-qcomUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade kernel-default-extraUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatchUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-azure-baseUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade dtb-amdUpgrade dtb-amazonUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-manUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-lg | Aug 14, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.4.0-1137-azureUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oemUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-gkeop-5.4Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-osp1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub