In the Linux kernel, the following vulnerability has been resolved:
net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
Syzkaller reported [1] hitting a warning after failing to allocate resources for skb in hsr_init_skb(). Since a WARN_ONCE() call will not help much in this case, it might be prudent to switch to netdev_warn_once(). At the very least it will suppress syzkaller reports such as [1].
Just in case, use netdev_warn_once() in send_prp_supervision_frame() for similar reasons.
[1] HSR: Could not send supervision frame WARNING: CPU: 1 PID: 85 at net/hsr/hsr_device.c:294 send_hsr_supervision_frame+0x60a/0x810 net/hsr/hsr_device.c:294 RIP: 0010:send_hsr_supervision_frame+0x60a/0x810 net/hsr/hsr_device.c:294 ... Call Trace: <IRQ> hsr_announce+0x114/0x370 net/hsr/hsr_device.c:382 call_timer_fn+0x193/0x590 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x764/0xb20 kernel/time/timer.c:2022 run_timer_softirq+0x58/0xd0 kernel/time/timer.c:2035 __do_softirq+0x21a/0x8de kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1076 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 ...
This issue is also found in older kernels (at least up to 5.10).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perfUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.149-99.161 | Aug 28, 2024 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-6.1.79-99.164 | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.5Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-starfiveUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-intelUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04d | May 17, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub