In the Linux kernel, the following vulnerability has been resolved:
x86/srso: Add SRSO mitigation for Hygon processors
Add mitigation for the speculative return stack overflow vulnerability which exists on Hygon processors too.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.134-87.145Upgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernelUpgrade perfUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headers | Jun 11, 2024 | Feb 29, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.56-82.125Upgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perf-debuginfo | Feb 17, 2025 | Feb 29, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jun 3, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Jul 1, 2024 | Feb 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade kernel-default-manUpgrade dtb-nvidiaUpgrade kernel-syms-rtUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-preemptUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-azure-livepatch-develUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade dtb-socionextUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-preempt-develUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade kernel-rtUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade dtb-lgUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-rt-livepatchUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade dtb-armUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-64kbUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rt | Mar 13, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade linux-intel-iot-realtimeUpgrade linux-lowlatencyUpgrade linux-awsUpgrade linuxUpgrade linux-gcpUpgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegraUpgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-oracle-5.15Upgrade linux-gkeop-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-intel-iotg-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-fipsUpgrade linux-ibmUpgrade linux-intel-iotgUpgrade linux-aws-fipsUpgrade linux-riscv-5.15Upgrade linux-azureUpgrade linux-nvidiaUpgrade linux-kvmUpgrade linux-azure-fdeUpgrade linux-azure-5.15Upgrade linux-hwe-5.15Upgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-nvidia-6.5Upgrade linux-realtimeUpgrade linux-raspiUpgrade linux-gcp-5.15 | Nov 19, 2024 | Feb 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub