The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
cfi: Fix __cfi_slowpath_diag RCU usage with cpuidle
RCU_NONIDLE usage during __cfi_slowpath_diag can result in an invalid RCU state in the cpuidle code path:
WARNING: CPU: 1 PID: 0 at kernel/rcu/tree.c:613 rcu_eqs_enter+0xe4/0x138 ... Call trace: rcu_eqs_enter+0xe4/0x138 rcu_idle_enter+0xa8/0x100 cpuidle_enter_state+0x154/0x3a8 cpuidle_enter+0x3c/0x58 do_idle.llvm.6590768638138871020+0x1f4/0x2ec cpu_startup_entry+0x28/0x2c secondary_start_kernel+0x1b8/0x220 __secondary_switched+0x94/0x98
Instead, call rcu_irq_enter/exit to wake up RCU only when needed and disable interrupts for the entire CFI shadow/module check when we do.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-livepatch-5.15.50-23.125Upgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64 | May 22, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidiaUpgrade linux-gcp-5.15Upgrade linux-gkeUpgrade linux-kvmUpgrade linux-aws-5.15Upgrade linux-lowlatencyUpgrade linux-azure-5.15Upgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-realtimeUpgrade linux-ibmUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-awsUpgrade linux-hwe-5.15Upgrade linux-raspiUpgrade linuxUpgrade linux-azure-fdeUpgrade linux-intel-iotg-5.15Upgrade linux-azure | Mar 19, 2025 | Feb 26, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub