In the Linux kernel, the following vulnerability has been resolved:
riscv: Sparse-Memory/vmemmap out-of-bounds fix
Offset vmemmap so that the first page of vmemmap will be mapped to the first page of physical memory in order to ensure that vmemmap’s bounds will be respected during pfn_to_page()/page_to_pfn() operations. The conversion macros will produce correct SV39/48/57 addresses for every possible/valid DRAM_BASE inside the physical memory limits.
v2:Address Alex's comments
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 4, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1063-awsUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-lowlatency-64k | Jul 1, 2024 | Apr 4, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub