In the Linux kernel, the following vulnerability has been resolved:
cxgb4: avoid accessing registers when clearing filters
Hardware register having the server TID base can contain invalid values when adapter is in bad state (for example, due to AER fatal error). Reading these invalid values in the register can lead to out-of-bound memory access. So, fix by using the saved server TID base when clearing filters.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfo | Aug 2, 2024 | Mar 25, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 25, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-azure-baseUpgrade kernel-64kbUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-preemptUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-preempt-develUpgrade kernel-default-manUpgrade kernel-default-base | Aug 9, 2024 | Mar 25, 2024 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-gcp-5.4Upgrade linux-fipsUpgrade linux-aws-5.4Upgrade linux-awsUpgrade linux-gcpUpgrade linuxUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-raspiUpgrade linux-gkeopUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-oracleUpgrade linux-aws-fips | Nov 19, 2024 | Mar 25, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub