In the Linux kernel, the following vulnerability has been resolved:
powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch
The RFI and STF security mitigation options can flip the interrupt_exit_not_reentrant static branch condition concurrently with the interrupt exit code which tests that branch.
Interrupt exit tests this condition to set MSR[EE|RI] for exit, then again in the case a soft-masked interrupt is found pending, to recover the MSR so the interrupt can be replayed before attempting to exit again. If the condition changes between these two tests, the MSR and irq soft-mask state will become corrupted, leading to warnings and possible crashes. For example, if the branch is initially true then false, MSR[EE] will be 0 but PACA_IRQ_HARD_DIS clear and EE may not get enabled, leading to warnings in irq_64.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Dec 5, 2024 | May 21, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade reiserfs-kmp-azureUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-devel-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-debugUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-develUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-docsUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dtb-hisilicon | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-oracleUpgrade linux-intel-iot-realtimeUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-bluefieldUpgrade linux-riscv-5.15Upgrade linux-azure-fdeUpgrade linux-ibmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-azure-5.15Upgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linuxUpgrade linux-gkeopUpgrade linux-gkeop-5.15Upgrade linux-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-azure-fde-5.15Upgrade linux-awsUpgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-azure | Nov 19, 2024 | May 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub