In the Linux kernel, the following vulnerability has been resolved:
powerpc/lib: Validate size for vector operations
Some of the fp/vmx code in sstep.c assume a certain maximum size for the instructions being emulated. The size of those operations however is determined separately in analyse_instr().
Add a check to validate the assumption on the maximum size of the operations, so as to prevent any unintended kernel stack corruption.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-cross-headersUpgrade bpftoolUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernelUpgrade kernel-doc | Jun 6, 2024 | Mar 6, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 1, 2024 | Mar 6, 2024 |
| Oracle_linux | — | Upgrade kernel | Jun 6, 2024 | Mar 6, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 6, 2024 | Mar 6, 2024 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-develUpgrade perfUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfo | Jun 17, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kernel-kvmsmall-develUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade dtb-socionextUpgrade dtb-exynosUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-azure-livepatch-develUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kb | Apr 18, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-azure-cvmUpgrade linux-image-bluefieldUpgrade linux-image-awsUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-starfiveUpgrade linux-image-genericUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-raspi2Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-raspiUpgrade linux-image-intelUpgrade linux-image-oracle-64kUpgrade linux-image-oemUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04 | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub