In the Linux kernel, the following vulnerability has been resolved:
net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
Syzkaller reported [1] hitting a warning after failing to allocate resources for skb in hsr_init_skb(). Since a WARN_ONCE() call will not help much in this case, it might be prudent to switch to netdev_warn_once(). At the very least it will suppress syzkaller reports such as [1].
Just in case, use netdev_warn_once() in send_prp_supervision_frame() for similar reasons.
[1] HSR: Could not send supervision frame WARNING: CPU: 1 PID: 85 at net/hsr/hsr_device.c:294 send_hsr_supervision_frame+0x60a/0x810 net/hsr/hsr_device.c:294 RIP: 0010:send_hsr_supervision_frame+0x60a/0x810 net/hsr/hsr_device.c:294 ... Call Trace: <IRQ> hsr_announce+0x114/0x370 net/hsr/hsr_device.c:382 call_timer_fn+0x193/0x590 kernel/time/timer.c:1700 expire_timers kernel/time/timer.c:1751 [inline] __run_timers+0x764/0xb20 kernel/time/timer.c:2022 run_timer_softirq+0x58/0xd0 kernel/time/timer.c:2035 __do_softirq+0x21a/0x8de kernel/softirq.c:553 invoke_softirq kernel/softirq.c:427 [inline] __irq_exit_rcu kernel/softirq.c:632 [inline] irq_exit_rcu+0xb7/0x120 kernel/softirq.c:644 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1076 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649 ...
This issue is also found in older kernels (at least up to 5.10).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.149-99.161Upgrade bpftoolUpgrade kernel-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.210-201.852Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel | Aug 28, 2024 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernelUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-tools | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeop-5.15Upgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-intelUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-106-genericUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-1024-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.5Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-5.15.0-1058-gke | May 17, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub