In the Linux kernel, the following vulnerability has been resolved:
userfaultfd: fix a race between writeprotect and exit_mmap()
A race is possible when a process exits, its VMAs are removed by exit_mmap() and at the same time userfaultfd_writeprotect() is called.
The race was detected by KASAN on a development kernel, but it appears to be possible on vanilla kernels as well.
Use mmget_not_zero() to prevent the race as done in other userfaultfd operations.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-devel | Aug 12, 2024 | May 22, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.82-83.359Upgrade python-perf-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfo | Apr 25, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | May 22, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Aug 12, 2024 | May 22, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade bpftool-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfo | Aug 22, 2024 | May 22, 2024 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade dtb-mediatekUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-64kb-livepatch-develUpgrade kernel-macrosUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-debugUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade dtb-apple | Aug 9, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub