In the Linux kernel, the following vulnerability has been resolved:
dm ioctl: prevent potential spectre v1 gadget
It appears like cmd could be a Spectre v1 gadget as it's supplied by a user and used as an array index. Prevent the contents of kernel memory from being leaked to userspace via speculative execution by using array_index_nospec.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.112-108.499Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.276-211.499Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-tools | May 21, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Jun 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jun 11, 2025 | Feb 26, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-fipsUpgrade linux-oracleUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-ibmUpgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-fipsUpgrade linux-intel-iotgUpgrade linux-kvmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-hweUpgrade linuxUpgrade linux-lowlatencyUpgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-gcp-5.4Upgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linux-raspiUpgrade linux-ibm-5.4Upgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-azure-fde-5.15Upgrade linux-hwe-5.4Upgrade linux-azure-4.15Upgrade linux-azure-5.15Upgrade linux-iotUpgrade linux-gkeUpgrade linux-hwe-5.15Upgrade linux-gcp-4.15Upgrade linux-hwe | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub