In the Linux kernel, the following vulnerability has been resolved:
s390/ptrace: handle setting of fpc register correctly
If the content of the floating point control (fpc) register of a traced process is modified with the ptrace interface the new value is tested for validity by temporarily loading it into the fpc register.
This may lead to corruption of the fpc register of the tracing process: if an interrupt happens while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space and will be loaded into fp/vx registers when returning to user space.
test_fp_ctl() restores the original user space fpc register value, however it will be discarded, when returning to user space.
In result the tracer will incorrectly continue to run with the value that was supposed to be used for the traced process.
Fix this by saving fpu register contents with save_fpu_regs() before using test_fp_ctl().
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernelUpgrade python3-perfUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-docUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-headers | Jun 6, 2024 | Mar 6, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Jun 26, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools | Jul 1, 2024 | Mar 6, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Mar 6, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 6, 2024 | Mar 6, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel | Jun 17, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade dtb-xilinxUpgrade kernel-source-rtUpgrade kernel-azure-baseUpgrade kernel-default-manUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade dtb-allwinnerUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-obs-buildUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-rt | Apr 18, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1129-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-genericUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-nvidia-6.5Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-azureUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-aws-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-intel-iotgUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1036-iotUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-bluefield | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub