In the Linux kernel, the following vulnerability has been resolved:
xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
int type = nla_type(nla);
if (type > XFRMA_MAX) { return -EOPNOTSUPP; }
@type is then used as an array index and can be used as a Spectre v1 gadget.
if (nla_len(nla) < compat_policy[type].len) {
array_index_nospec() can be used to prevent leaking content of kernel memory to malicious users.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-toolsUpgrade kernelUpgrade perfUpgrade kernel-livepatch-5.15.102-61.139Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-devel | Jun 26, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.12-17.42Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perf | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-debugUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade dtb-alteraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade kernel-source-azureUpgrade dtb-socionextUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade dlm-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-rtUpgrade kernel-default-optional | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-oracle-5.15Upgrade linux-kvmUpgrade linux-ibmUpgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-gkeUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-aws-5.15Upgrade linux-azure-fdeUpgrade linux-raspiUpgrade linux-nvidiaUpgrade linux-lowlatencyUpgrade linux-gcp-5.15Upgrade linux-azure-fde-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcpUpgrade linux-intel-iot-realtimeUpgrade linux-gkeop-5.15Upgrade linux-azureUpgrade linuxUpgrade linux-awsUpgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-bluefield | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub