In the Linux kernel, the following vulnerability has been resolved:
x86/alternatives: Disable KASAN in apply_alternatives()
Fei has reported that KASAN triggers during apply_alternatives() on a 5-level paging machine:
BUG: KASAN: out-of-bounds in rcu_is_watching() Read of size 4 at addr ff110003ee6419a0 by task swapper/0/0 ... __asan_load4() rcu_is_watching() trace_hardirqs_on() text_poke_early() apply_alternatives() ...
On machines with 5-level paging, cpu_feature_enabled(X86_FEATURE_LA57) gets patched. It includes KASAN code, where KASAN_SHADOW_START depends on __VIRTUAL_MASK_SHIFT, which is defined with cpu_feature_enabled().
KASAN gets confused when apply_alternatives() patches the KASAN_SHADOW_START users. A test patch that makes KASAN_SHADOW_START static, by replacing __VIRTUAL_MASK_SHIFT with 56, works around the issue.
Fix it for real by disabling KASAN while the kernel is patching alternatives.
[ mingo: updated the changelog ]
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.199-190.747Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-5.15.136-90.144Upgrade bpftoolUpgrade perf-debuginfoUpgrade bpftool-debuginfo | Jul 9, 2024 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | May 13, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftool | Jun 3, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Jul 1, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-docsUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-xilinxUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-socionextUpgrade kernel-obs-qaUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-freescaleUpgrade kernel-symsUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-amlogicUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-devel | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1131-azureUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-oemUpgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-186-genericUpgrade linux-image-5.4.0-1038-iotUpgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-virtual | Jul 15, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub