In the Linux kernel, the following vulnerability has been resolved:
crypto: xilinx - call finalize with bh disabled
When calling crypto_finalize_request, BH should be disabled to avoid triggering the following calltrace:
------------[ cut here ]------------ WARNING: CPU: 2 PID: 74 at crypto/crypto_engine.c:58 crypto_finalize_request+0xa0/0x118 Modules linked in: cryptodev(O) CPU: 2 PID: 74 Comm: firmware:zynqmp Tainted: G O 6.8.0-rc1-yocto-standard #323 Hardware name: ZynqMP ZCU102 Rev1.0 (DT) pstate: 40000005 (nZcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : crypto_finalize_request+0xa0/0x118 lr : crypto_finalize_request+0x104/0x118 sp : ffffffc085353ce0 x29: ffffffc085353ce0 x28: 0000000000000000 x27: ffffff8808ea8688 x26: ffffffc081715038 x25: 0000000000000000 x24: ffffff880100db00 x23: ffffff880100da80 x22: 0000000000000000 x21: 0000000000000000 x20: ffffff8805b14000 x19: ffffff880100da80 x18: 0000000000010450 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000003 x13: 0000000000000000 x12: ffffff880100dad0 x11: 0000000000000000 x10: ffffffc0832dcd08 x9 : ffffffc0812416d8 x8 : 00000000000001f4 x7 : ffffffc0830d2830 x6 : 0000000000000001 x5 : ffffffc082091000 x4 : ffffffc082091658 x3 : 0000000000000000 x2 : ffffffc7f9653000 x1 : 0000000000000000 x0 : ffffff8802d20000 Call trace: crypto_finalize_request+0xa0/0x118 crypto_finalize_aead_request+0x18/0x30 zynqmp_handle_aes_req+0xcc/0x388 crypto_pump_work+0x168/0x2d8 kthread_worker_fn+0xfc/0x3a0 kthread+0x118/0x138 ret_from_fork+0x10/0x20 irq event stamp: 40 hardirqs last enabled at (39): [<ffffffc0812416f8>] _raw_spin_unlock_irqrestore+0x70/0xb0 hardirqs last disabled at (40): [<ffffffc08122d208>] el1_dbg+0x28/0x90 softirqs last enabled at (36): [<ffffffc080017dec>] kernel_neon_begin+0x8c/0xf0 softirqs last disabled at (34): [<ffffffc080017dc0>] kernel_neon_begin+0x60/0xf0 ---[ end trace 0000000000000000 ]---
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-develUpgrade dtb-alteraUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-armUpgrade kernel-64kbUpgrade kernel-rt-livepatchUpgrade kernel-default-baseUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade kernel-develUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade dlm-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-rockchipUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade dtb-lgUpgrade kernel-azure | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.15.0-113-genericUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-genericUpgrade linux-image-5.15.0-1066-azureUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-112-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-awsUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-generic-lpae-hwe-20.04 | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub