In the Linux kernel, the following vulnerability has been resolved:
batman-adv: Avoid WARN_ON timing related checks
The soft/batadv interface for a queued OGM can be changed during the time the OGM was queued for transmission and when the OGM is actually transmitted by the worker.
But WARN_ON must be used to denote kernel bugs and not to print simple warnings. A warning can simply be printed using pr_warn.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade kernel-azure-baseUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-docsUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-develUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-default-develUpgrade kernel-default-base | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-aws-5.4Upgrade linux-aws-fipsUpgrade linux-fipsUpgrade linux-azure-fipsUpgrade linux-kvmUpgrade linux-aws-hweUpgrade linux-oracleUpgrade linux-oracle-5.4Upgrade linux-raspiUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-gcp-4.15Upgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linuxUpgrade linux-hweUpgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-azure-5.4 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub