In the Linux kernel, the following vulnerability has been resolved:
xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
int type = nla_type(nla);
if (type > XFRMA_MAX) { return -EOPNOTSUPP; }
@type is then used as an array index and can be used as a Spectre v1 gadget.
if (nla_len(nla) < compat_policy[type].len) {
array_index_nospec() can be used to prevent leaking content of kernel memory to malicious users.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade perfUpgrade kernel-tools-develUpgrade bpftool-debuginfo | Jun 26, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.12-17.42Upgrade perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-default-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-symsUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dlm-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-develUpgrade dtb-armUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade kernel-defaultUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-devel | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-fdeUpgrade linux-aws-5.15Upgrade linux-gcp-5.15Upgrade linux-oracle-5.15Upgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-raspiUpgrade linux-oracleUpgrade linux-azure-fde-5.15Upgrade linux-gkeopUpgrade linux-ibmUpgrade linux-riscv-5.15Upgrade linux-lowlatencyUpgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-gkeUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-intel-iot-realtimeUpgrade linuxUpgrade linux-azureUpgrade linux-awsUpgrade linux-realtimeUpgrade linux-gkeop-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.15 | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub