In the Linux kernel, the following vulnerability has been resolved:
dma-buf: heaps: Fix potential spectre v1 gadget
It appears like nr could be a Spectre v1 gadget as it's supplied by a user and used as an array index. Prevent the contents of kernel memory from being leaked to userspace via speculative execution by using array_index_nospec.
[sumits: added fixes and cc: stable tags]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade kernel-preemptUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-preempt-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-base | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15 | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub