In the Linux kernel, the following vulnerability has been resolved:
xfrm/compat: prevent potential spectre v1 gadget in xfrm_xlate32_attr()
int type = nla_type(nla);
if (type > XFRMA_MAX) { return -EOPNOTSUPP; }
@type is then used as an array index and can be used as a Spectre v1 gadget.
if (nla_len(nla) < compat_policy[type].len) {
array_index_nospec() can be used to prevent leaking content of kernel memory to malicious users.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.102-61.139Upgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Jun 26, 2024 | May 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade perfUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.12-17.42Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | May 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 21, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 21, 2024 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade dtb-mediatekUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-livepatchUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade dtb-xilinxUpgrade dtb-armUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-defaultUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade dtb-nvidiaUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade dtb-broadcomUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade kernel-source-azure | Jun 13, 2024 | May 21, 2024 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-gkeopUpgrade linux-lowlatencyUpgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-oracle-5.15Upgrade linux-azure-fde-5.15Upgrade linux-ibmUpgrade linux-intel-iotgUpgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux-azure-fdeUpgrade linux-nvidiaUpgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linuxUpgrade linux-gkeop-5.15Upgrade linux-awsUpgrade linux-azureUpgrade linux-intel-iot-realtimeUpgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gcpUpgrade linux-bluefield | Nov 19, 2024 | May 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub