In the Linux kernel, the following vulnerability has been resolved:
perf/aux: Fix AUX buffer serialization
Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to fully serialize it.
Note that in the lock order comment the perf_event::mmap_mutex order was already wrong, that is, it nesting under mmap_lock is not new with this patch.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade libperfUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-devel-matchedUpgrade kernel-64kUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade bpftoolUpgrade kernel-uki-virtUpgrade kernel-64k-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debugUpgrade kernel-devel | Jan 14, 2025 | Sep 13, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.167-112.165Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.226-214.879Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfo | Oct 3, 2024 | Sep 13, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-6.1.111-120.187Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Sep 13, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Dec 12, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Dec 12, 2024 | Sep 13, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 21, 2024 | Sep 13, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jan 10, 2025 | Sep 13, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade dtb-broadcomUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dtb-apmUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-sourceUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade dtb-exynosUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-mediatek | Dec 5, 2025 | Jan 9, 2025 |
| Ubuntu | — | Upgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-genericUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-awsUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-lts-24.04 | Nov 12, 2024 | Sep 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub