In the Linux kernel, the following vulnerability has been resolved:
dm-crypt, dm-verity: disable tasklets
Tasklets have an inherent problem with memory corruption. The function tasklet_action_common calls tasklet_trylock, then it calls the tasklet callback and then it calls tasklet_unlock. If the tasklet callback frees the structure that contains the tasklet or if it calls some code that may free it, tasklet_unlock will write into free memory.
The commits 8e14f610159d and d9a02e016aaf try to fix it for dm-crypt, but it is not a sufficient fix and the data corruption can still happen [1]. There is no fix for dm-verity and dm-verity will write into free memory with every tasklet-processed bio.
There will be atomic workqueues implemented in the kernel 6.9 [2]. They will have better interface and they will not suffer from the memory corruption problem.
But we need something that stops the memory corruption now and that can be backported to the stable kernels. So, I'm proposing this commit that disables tasklets in both dm-crypt and dm-verity. This commit doesn't remove the tasklet support, because the tasklet code will be reused when atomic workqueues will be implemented.
[1] https://lore.kernel.org/all/[email protected]/T/ [2] https://lore.kernel.org/lkml/[email protected]/
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernelUpgrade bpftool | Dec 20, 2024 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-develUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-rt-vdsoUpgrade dtb-marvellUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade dtb-apmUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-rtUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dtb-freescaleUpgrade kernel-rt-livepatchUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dtb-armUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-lgUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade dtb-xilinx | May 6, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-134-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-6.5.0-1023-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1027-oemUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-starfiveUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-azure | Jul 15, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub