In the Linux kernel, the following vulnerability has been resolved:
fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
If kiocb_set_cancel_fn() is called for I/O submitted via io_uring, the following kernel warning appears:
WARNING: CPU: 3 PID: 368 at fs/aio.c:598 kiocb_set_cancel_fn+0x9c/0xa8 Call trace: kiocb_set_cancel_fn+0x9c/0xa8 ffs_epfile_read_iter+0x144/0x1d0 io_read+0x19c/0x498 io_issue_sqe+0x118/0x27c io_submit_sqes+0x25c/0x5fc __arm64_sys_io_uring_enter+0x104/0xab0 invoke_syscall+0x58/0x11c el0_svc_common+0xb4/0xf4 do_el0_svc+0x2c/0xb0 el0_svc+0x2c/0xa4 el0t_64_sync_handler+0x68/0xb4 el0t_64_sync+0x1a4/0x1a8
Fix this by setting the IOCB_AIO_RW flag for read and write I/O that is submitted by libaio.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.213-201.855Upgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.343-259.562Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-livepatch-5.15.152-100.162Upgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debuginfo | Aug 19, 2024 | Apr 3, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-develUpgrade kernel-livepatch-6.1.82-99.168Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel | Feb 17, 2025 | Apr 3, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 16, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Jun 26, 2024 | Apr 3, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | Apr 3, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 3, 2024 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-extraUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade dtb-armUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-lgUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-symsUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade dtb-amazon | May 15, 2024 | Apr 3, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-intelUpgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-5.4.0-186-generic-lpaeUpgrade linux-image-5.4.0-1073-ibmUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1114-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.4.0-186-genericUpgrade linux-image-5.4.0-1110-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1093-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1086-bluefieldUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-awsUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1038-iotUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1125-oracleUpgrade linux-image-5.4.0-1126-awsUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1130-gcpUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-5.15Upgrade linux-image-oemUpgrade linux-image-5.4.0-1045-xilinx-zynqmpUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-186-lowlatencyUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1131-azureUpgrade linux-image-5.15.0-1061-oracle | Jul 1, 2024 | Apr 3, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub