In the Linux kernel, the following vulnerability has been resolved:
enetc: Fix illegal access when reading affinity_hint
irq_set_affinity_hit() stores a reference to the cpumask_t parameter in the irq descriptor, and that reference can be accessed later from irq_affinity_hint_proc_show(). Since the cpu_mask parameter passed to irq_set_affinity_hit() has only temporary storage (it's on the stack memory), later accesses to it are illegal. Thus reads from the corresponding procfs affinity_hint file can result in paging request oops.
The issue is fixed by the get_cpu_mask() helper, which provides a permanent storage for the cpumask_t parameter.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade dtb-amazonUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-docsUpgrade kernel-source-rtUpgrade kernel-preempt-develUpgrade dlm-kmp-rtUpgrade kernel-debugUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-rt-optionalUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-preemptUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-rt_debug-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-amlogicUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade dtb-lgUpgrade dtb-apmUpgrade kernel-rt-extraUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-macros | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-gcp-5.4Upgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linuxUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-azureUpgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-ibmUpgrade linux-kvmUpgrade linux-raspiUpgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-oracleUpgrade linux-fipsUpgrade linux-aws-5.4 | Nov 19, 2024 | May 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub