In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v3-its: Fix potential VPE leak on error
In its_vpe_irq_domain_alloc, when its_vpe_init() returns an error, there is an off-by-one in the number of VPEs to be freed.
Fix it by simply passing the number of VPEs allocated, which is the index of the loop iterating over the VPEs.
[maz: fixed commit message]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-cross-headers | Aug 12, 2024 | May 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.252-195.481Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.75-79.358Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python-perfUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftool | Dec 12, 2024 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | May 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-modulesUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-rt-modules-extra | Aug 22, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-exynosUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade dtb-amdUpgrade dtb-amlogicUpgrade kernel-debugUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade dtb-renesasUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-default-vdsoUpgrade dtb-marvellUpgrade dtb-apmUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-allwinnerUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade dtb-cavium | Aug 9, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-azure-fipsUpgrade linuxUpgrade linux-oracleUpgrade linux-gkeopUpgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-aws-hweUpgrade linux-raspiUpgrade linux-gcp-5.4Upgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-awsUpgrade linux-bluefieldUpgrade linux-hwe-5.4Upgrade linux-gcp-4.15Upgrade linux-azure-5.4Upgrade linux-kvmUpgrade linux-ibmUpgrade linux-hweUpgrade linux-raspi-5.4Upgrade linux-azure-4.15Upgrade linux-gcp-fips | Nov 19, 2024 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub