In the Linux kernel, the following vulnerability has been resolved:
vt_ioctl: fix array_index_nospec in vt_setactivate
array_index_nospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console should be decreased first and then sanitized with array_index_nospec.
Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvm | Sep 26, 2024 | Jul 16, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-5.10.102-99.473Upgrade kernelUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.268-205.500Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-devel | Aug 19, 2024 | Jul 16, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 9, 2024 | Jul 16, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | Jul 16, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 16, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Jul 16, 2024 |
| Rocky_linux | — | Upgrade python3-perfUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-devel | Oct 2, 2024 | Jul 16, 2024 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15Upgrade linux-kvmUpgrade linux-raspiUpgrade linux-azure-fde-5.15Upgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-aws-hweUpgrade linux-gcp-5.4Upgrade linux-oracle-5.4Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-azure-4.15Upgrade linuxUpgrade linux-raspi-5.4Upgrade linux-ibm-5.4Upgrade linux-iotUpgrade linux-hwe | Nov 19, 2024 | Jul 16, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jul 16, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub