In the Linux kernel, the following vulnerability has been resolved:
sched/membarrier: reduce the ability to hammer on sys_membarrier
On some systems, sys_membarrier can be very expensive, causing overall slowdowns for everything. So put a lock on the path in order to serialize the accesses to prevent the ability for this to be called at too high of a frequency and saturate the machine.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade rtlaUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-coreUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-debugUpgrade kernel-modules-extraUpgrade kernel-64k-modules-extraUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-extraUpgrade rvUpgrade kernelUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modulesUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-64k-coreUpgrade bpftoolUpgrade kernel-debug-modules | May 31, 2024 | Feb 26, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.149-99.161Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perfUpgrade kernel-livepatch-4.14.336-257.568Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.210-201.852 | Apr 26, 2024 | Feb 26, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-modules-extraUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Feb 24, 2024 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Mar 13, 2024 | Feb 26, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Feb 26, 2024 |
| F5 Big Ip | — | — | May 22, 2024 | Mar 15, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | May 13, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Jun 3, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jul 1, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-tools-libs | Jul 23, 2024 | Feb 26, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jul 17, 2024 | Feb 26, 2024 |
| Oracle_linux | — | Upgrade kernel | Mar 21, 2024 | Feb 24, 2024 |
| Redhat Openshift | — | Upgrade rhcos | May 10, 2024 | Feb 26, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Mar 13, 2024 | Feb 26, 2024 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade perf | Jun 17, 2024 | Feb 26, 2024 |
| Suse | — | Upgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade kernel-sourceUpgrade kernel-preempt-develUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade kernel-preemptUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade dtb-amazonUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-extra | Mar 13, 2024 | Feb 26, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-bluefieldUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1036-iotUpgrade linux-image-virtualUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-4.15.0-1167-gcpUpgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-hweUpgrade linux-image-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-4.15.0-1157-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1174-awsUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.15.0-1136-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1182-azureUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1124-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-aws-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-230-lowlatencyUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-4.15.0-230-genericUpgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-gkeopUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-gkeUpgrade linux-image-oem-20.04b | May 17, 2024 | Feb 26, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub