In the Linux kernel, the following vulnerability has been resolved:
protect the fetch of ->fd[fd] in do_dup2() from mispredictions
both callers have verified that fd is not greater than ->max_fds; however, misprediction might end up with tofree = fdt->fd[fd]; being speculatively executed. That's wrong for the same reasons why it's wrong in close_fd()/file_close_fd_locked(); the same solution applies - array_index_nospec(fd, fdt->max_fds) could differ from fd only in case of speculative execution on mispredicted path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-tools | Sep 26, 2024 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 30, 2024 | Jul 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Nov 11, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 26, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Nov 11, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | Aug 17, 2024 |
| Rocky_linux | — | Upgrade python3-perfUpgrade kernel-debugUpgrade kernelUpgrade kernel-debug-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade perfUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-tools | May 8, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-vdsoUpgrade dlm-kmp-rtUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatchUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade kernel-preemptUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade dtb-sprdUpgrade kernel-macrosUpgrade kernel-azureUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-default-manUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade kernel-debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dtb-apmUpgrade dtb-amdUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-lgUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-source-azureUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kbUpgrade dtb-broadcom | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-intelUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-gkeUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-oracleUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-oemUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1140-azureUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-200-lowlatency | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub