In the Linux kernel, the following vulnerability has been resolved:
enetc: Fix illegal access when reading affinity_hint
irq_set_affinity_hit() stores a reference to the cpumask_t parameter in the irq descriptor, and that reference can be accessed later from irq_affinity_hint_proc_show(). Since the cpu_mask parameter passed to irq_set_affinity_hit() has only temporary storage (it's on the stack memory), later accesses to it are illegal. Thus reads from the corresponding procfs affinity_hint file can result in paging request oops.
The issue is fixed by the get_cpu_mask() helper, which provides a permanent storage for the cpumask_t parameter.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade dtb-lgUpgrade gfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade dtb-alteraUpgrade dtb-armUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-preemptUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-symsUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-preempt-develUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade dlm-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-default-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-awsUpgrade linuxUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-raspiUpgrade linux-ibmUpgrade linux-aws-5.4Upgrade linux-oracle-5.4Upgrade linux-gkeopUpgrade linux-aws-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub