In the Linux kernel, the following vulnerability has been resolved:
mtd: require write permissions for locking and badblock ioctls
MEMLOCK, MEMUNLOCK and OTPLOCK modify protection bits. Thus require write permission. Depending on the hardware MEMLOCK might even be write-once, e.g. for SPI-NOR flashes with their WP# tied to GND. OTPLOCK is always write-once.
MEMSETBADBLOCK modifies the bad block table.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-rt-debug-core | Jun 6, 2024 | Feb 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-4.14.238-182.421Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-headers | Aug 2, 2024 | Feb 29, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 29, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Feb 29, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 6, 2024 | Feb 29, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-core | Jun 17, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-azureUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-baseUpgrade kernel-preemptUpgrade kernel-syms-azureUpgrade kernel-preempt-devel | Aug 9, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-4.4.0-261-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.4.0-1176-awsUpgrade linux-image-4.4.0-1139-kvmUpgrade linux-image-4.4.0-261-generic | Nov 19, 2024 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub