In the Linux kernel, the following vulnerability has been resolved:
x86/alternatives: Disable KASAN in apply_alternatives()
Fei has reported that KASAN triggers during apply_alternatives() on a 5-level paging machine:
BUG: KASAN: out-of-bounds in rcu_is_watching() Read of size 4 at addr ff110003ee6419a0 by task swapper/0/0 ... __asan_load4() rcu_is_watching() trace_hardirqs_on() text_poke_early() apply_alternatives() ...
On machines with 5-level paging, cpu_feature_enabled(X86_FEATURE_LA57) gets patched. It includes KASAN code, where KASAN_SHADOW_START depends on __VIRTUAL_MASK_SHIFT, which is defined with cpu_feature_enabled().
KASAN gets confused when apply_alternatives() patches the KASAN_SHADOW_START users. A test patch that makes KASAN_SHADOW_START static, by replacing __VIRTUAL_MASK_SHIFT with 56, works around the issue.
Fix it for real by disabling KASAN while the kernel is patching alternatives.
[ mingo: updated the changelog ]
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.199-190.747Upgrade kernel-headersUpgrade kernel-livepatch-5.15.136-90.144Upgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64 | Jul 9, 2024 | Mar 2, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | May 13, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftool | Jun 3, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftool | Jul 1, 2024 | Mar 2, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jul 17, 2024 | Mar 2, 2024 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade dtb-xilinxUpgrade kernel-defaultUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade dtb-caviumUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-rt-livepatch-develUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-azureUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-debug-livepatch-develUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade dtb-amd | Apr 17, 2024 | Mar 2, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-oem-osp1Upgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1126-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-snapdragon-hwe-18.04 | Jul 15, 2024 | Mar 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub