In the Linux kernel, the following vulnerability has been resolved:
s390/ptrace: handle setting of fpc register correctly
If the content of the floating point control (fpc) register of a traced process is modified with the ptrace interface the new value is tested for validity by temporarily loading it into the fpc register.
This may lead to corruption of the fpc register of the tracing process: if an interrupt happens while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space and will be loaded into fp/vx registers when returning to user space.
test_fp_ctl() restores the original user space fpc register value, however it will be discarded, when returning to user space.
In result the tracer will incorrectly continue to run with the value that was supposed to be used for the traced process.
Fix this by saving fpu register contents with save_fpu_regs() before using test_fp_ctl().
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-headers | Jun 6, 2024 | Mar 6, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Jun 26, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Jul 1, 2024 | Mar 6, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Mar 6, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 6, 2024 | Mar 6, 2024 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-debug-devel | Jun 17, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade ocfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dtb-broadcomUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade kernel-azure-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-develUpgrade dtb-lgUpgrade dtb-appleUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-socionext | Apr 18, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intelUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-gcpUpgrade linux-image-oemUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-starfiveUpgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-nvidia-64k-hwe-22.04 | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub