A speculative pointer dereference problem exists in the Linux Kernel on the do_prlimit() function. The resource argument value is controlled and is used in pointer arithmetic for the 'rlim' variable and can be used to leak the contents. We recommend upgrading past version 6.1.8 or commit 739790605705ddcf18f21782b9c99ad7d53a8c11
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-extraUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-coreUpgrade perfUpgrade rtlaUpgrade kernel-rt-debugUpgrade kernel-64k-develUpgrade kernel-64kUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules | Aug 9, 2023 | Apr 26, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade perfUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-tools-develUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.309-231.529Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.173-154.642Upgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | May 2, 2023 | Apr 26, 2023 |
| Amazon_linux | — | Upgrade kernel | May 2, 2023 | Mar 20, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.15-28.43Upgrade perfUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Jan 21, 2023 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 2, 2023 | Apr 26, 2023 |
| Debian | — | Upgrade linux | May 1, 2023 | Apr 26, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Jul 18, 2023 | Apr 26, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools | Jan 10, 2024 | Apr 26, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-tools | Jan 10, 2024 | Apr 26, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Aug 9, 2023 | Apr 26, 2023 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 7, 2023 | Jan 21, 2023 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 2, 2023 | Apr 26, 2023 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-core | Mar 5, 2024 | Apr 26, 2023 |
| Ubuntu | — | Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-bluefieldUpgrade linux-image-5.19.0-1024-lowlatency-64kUpgrade linux-image-3.13.0-193-genericUpgrade linux-image-kvmUpgrade linux-image-5.19.0-42-generic-64kUpgrade linux-image-5.19.0-42-genericUpgrade linux-image-4.4.0-1159-awsUpgrade linux-image-4.4.0-243-lowlatencyUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1017-iotUpgrade linux-image-generic-lts-trustyUpgrade linux-image-5.15.0-1030-intel-iotgUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-4.4.0-1122-kvmUpgrade linux-image-awsUpgrade linux-image-4.4.0-243-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-serverUpgrade linux-image-raspiUpgrade linux-image-5.19.0-42-generic-lpaeUpgrade linux-image-5.19.0-1018-raspi-nolpaeUpgrade linux-image-4.4.0-1121-awsUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-5.4.0-1024-xilinx-zynqmpUpgrade linux-image-5.19.0-1024-lowlatencyUpgrade linux-image-5.19.0-1023-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-intelUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.19.0-1024-gcpUpgrade linux-image-azureUpgrade linux-image-5.19.0-1022-ibmUpgrade linux-image-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1062-bluefieldUpgrade linux-image-5.19.0-1018-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.19.0-1025-awsUpgrade linux-image-3.13.0-193-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-5.19.0-1023-kvmUpgrade linux-image-5.19.0-1026-azureUpgrade linux-image-oem-22.04b | May 17, 2023 | Apr 26, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 26, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub