In the Linux kernel, the following vulnerability has been resolved:
x86/srso: Add SRSO mitigation for Hygon processors
Add mitigation for the speculative return stack overflow vulnerability which exists on Hygon processors too.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-livepatch-5.15.134-87.145Upgrade kernelUpgrade bpftoolUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headers | Jun 11, 2024 | Feb 29, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.56-82.125Upgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Feb 29, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Jun 3, 2024 | Feb 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Jul 1, 2024 | Feb 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Dec 5, 2024 | Feb 29, 2024 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-exynosUpgrade dtb-apmUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade dtb-lgUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-alteraUpgrade kernel-azureUpgrade kernel-default-manUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-rtUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-preemptUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade kernel-syms-rt | Mar 13, 2024 | Feb 29, 2024 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-lowlatencyUpgrade linux-ibm-5.15Upgrade linuxUpgrade linux-nvidia-tegra-igxUpgrade linux-nvidia-tegraUpgrade linux-awsUpgrade linux-nvidia-tegra-5.15Upgrade linux-gkeUpgrade linux-intel-iot-realtimeUpgrade linux-realtimeUpgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-bluefieldUpgrade linux-kvmUpgrade linux-azure-5.15Upgrade linux-raspiUpgrade linux-azureUpgrade linux-gkeopUpgrade linux-fipsUpgrade linux-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-azure-fdeUpgrade linux-gkeop-5.15Upgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-nvidia-6.5Upgrade linux-oracle-5.15Upgrade linux-nvidiaUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15 | Nov 19, 2024 | Feb 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub