In the Linux kernel, the following vulnerability has been resolved:
riscv: Sync efi page table's kernel mappings before switching
The EFI page table is initially created as a copy of the kernel page table. With VMAP_STACK enabled, kernel stacks are allocated in the vmalloc area: if the stack is allocated in a new PGD (one that was not present at the moment of the efi page table creation or not synced in a previous vmalloc fault), the kernel will take a trap when switching to the efi page table when the vmalloc kernel stack is accessed, resulting in a kernel panic.
Fix that by updating the efi kernel mappings before switching to the efi page table.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade bpftool | Mar 14, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux | Oct 23, 2024 | Oct 23, 2024 |
| Ubuntu | — | Upgrade linux-nvidiaUpgrade linux-gkeUpgrade linux-azure-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.15Upgrade linux-gcpUpgrade linux-oracleUpgrade linux-intel-iot-realtimeUpgrade linux-intel-iotgUpgrade linux-bluefieldUpgrade linux-aws-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-ibmUpgrade linux-kvmUpgrade linux-oracle-5.15Upgrade linux-azure-fdeUpgrade linux-realtimeUpgrade linux-gkeopUpgrade linux-awsUpgrade linux-hwe-5.15Upgrade linux-azure-fde-5.15Upgrade linux-raspiUpgrade linux-azureUpgrade linuxUpgrade linux-gkeop-5.15Upgrade linux-lowlatency | Nov 19, 2024 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub