In the Linux kernel, the following vulnerability has been resolved:
userfaultfd: fix a race between writeprotect and exit_mmap()
A race is possible when a process exits, its VMAs are removed by exit_mmap() and at the same time userfaultfd_writeprotect() is called.
The race was detected by KASAN on a development kernel, but it appears to be possible on vanilla kernels as well.
Use mmget_not_zero() to prevent the race as done in other userfaultfd operations.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-docUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules | Aug 12, 2024 | May 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.82-83.359Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf | Apr 25, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Aug 12, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rtUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules | Aug 22, 2024 | May 22, 2024 |
| Suse | — | Upgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kernel-rt-vdsoUpgrade dtb-socionextUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade dtb-broadcomUpgrade kernel-debug-livepatch-develUpgrade dtb-appleUpgrade dtb-freescaleUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade dlm-kmp-64kbUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade dtb-lgUpgrade dtb-mediatekUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kb | Aug 9, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub