In the Linux kernel, the following vulnerability has been resolved:
vt_ioctl: fix array_index_nospec in vt_setactivate
array_index_nospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console should be decreased first and then sanitized with array_index_nospec.
Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-modules | Sep 26, 2024 | Jul 16, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.268-205.500Upgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.102-99.473Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headers | Aug 19, 2024 | Jul 16, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Jul 16, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 16, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Jul 16, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel | Oct 2, 2024 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-azure-4.15Upgrade linux-azureUpgrade linux-gcp-4.15Upgrade linux-hweUpgrade linux-iotUpgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-awsUpgrade linux-bluefieldUpgrade linuxUpgrade linux-raspi-5.4Upgrade linux-ibm-5.4Upgrade linux-gcp-5.4Upgrade linux-azure-fde-5.15Upgrade linux-oracle-5.4Upgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-ibmUpgrade linux-aws-hweUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-raspi | Nov 19, 2024 | Jul 16, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jul 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub