In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v3-its: Fix potential VPE leak on error
In its_vpe_irq_domain_alloc, when its_vpe_init() returns an error, there is an off-by-one in the number of VPEs to be freed.
Fix it by simply passing the number of VPEs allocated, which is the index of the loop iterating over the VPEs.
[maz: fixed commit message]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade python3-perfUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-abi-stablelists | Aug 12, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-4.14.252-195.481Upgrade kernelUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-tools | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-rtUpgrade python3-perf-debuginfo | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade kernel-docsUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-source-rtUpgrade dlm-kmp-azureUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-exynosUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-default-optionalUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade kernel-devel-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-apmUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade dtb-amlogic | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-azure-4.15Upgrade linux-hwe-5.4Upgrade linux-hweUpgrade linux-kvmUpgrade linux-aws-fipsUpgrade linux-azure-5.4Upgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-fipsUpgrade linux-azureUpgrade linux-oracle-5.4Upgrade linux-oracleUpgrade linux-gkeopUpgrade linuxUpgrade linux-raspiUpgrade linux-aws-5.4 | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub