In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix fortify source warning while accessing Eth segment
------------[ cut here ]------------ memcpy: detected field-spanning write (size 56) of single field "eseg->inline_hdr.start" at /var/lib/dkms/mlnx-ofed-kernel/5.8/build/drivers/infiniband/hw/mlx5/wr.c:131 (size 2) WARNING: CPU: 0 PID: 293779 at /var/lib/dkms/mlnx-ofed-kernel/5.8/build/drivers/infiniband/hw/mlx5/wr.c:131 mlx5_ib_post_send+0x191b/0x1a60 [mlx5_ib] Modules linked in: 8021q garp mrp stp llc rdma_ucm(OE) rdma_cm(OE) iw_cm(OE) ib_ipoib(OE) ib_cm(OE) ib_umad(OE) mlx5_ib(OE) ib_uverbs(OE) ib_core(OE) mlx5_core(OE) pci_hyperv_intf mlxdevm(OE) mlx_compat(OE) tls mlxfw(OE) psample nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables libcrc32c nfnetlink mst_pciconf(OE) knem(OE) vfio_pci vfio_pci_core vfio_iommu_type1 vfio iommufd irqbypass cuse nfsv3 nfs fscache netfs xfrm_user xfrm_algo ipmi_devintf ipmi_msghandler binfmt_misc crct10dif_pclmul crc32_pclmul polyval_clmulni polyval_generic ghash_clmulni_intel sha512_ssse3 snd_pcsp aesni_intel crypto_simd cryptd snd_pcm snd_timer joydev snd soundcore input_leds serio_raw evbug nfsd auth_rpcgss nfs_acl lockd grace sch_fq_codel sunrpc drm efi_pstore ip_tables x_tables autofs4 psmouse virtio_net net_failover failover floppy [last unloaded: mlx_compat(OE)] CPU: 0 PID: 293779 Comm: ssh Tainted: G OE 6.2.0-32-generic #32~22.04.1-Ubuntu Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011 RIP: 0010:mlx5_ib_post_send+0x191b/0x1a60 [mlx5_ib] Code: 0c 01 00 a8 01 75 25 48 8b 75 a0 b9 02 00 00 00 48 c7 c2 10 5b fd c0 48 c7 c7 80 5b fd c0 c6 05 57 0c 03 00 01 e8 95 4d 93 da <0f> 0b 44 8b 4d b0 4c 8b 45 c8 48 8b 4d c0 e9 49 fb ff ff 41 0f b7 RSP: 0018:ffffb5b48478b570 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffb5b48478b628 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffb5b48478b5e8 R13: ffff963a3c609b5e R14: ffff9639c3fbd800 R15: ffffb5b480475a80 FS: 00007fc03b444c80(0000) GS:ffff963a3dc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000556f46bdf000 CR3: 0000000006ac6003 CR4: 00000000003706f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? show_regs+0x72/0x90 ? mlx5_ib_post_send+0x191b/0x1a60 [mlx5_ib] ? __warn+0x8d/0x160 ? mlx5_ib_post_send+0x191b/0x1a60 [mlx5_ib] ? report_bug+0x1bb/0x1d0 ? handle_bug+0x46/0x90 ? exc_invalid_op+0x19/0x80 ? asm_exc_invalid_op+0x1b/0x20 ? mlx5_ib_post_send+0x191b/0x1a60 [mlx5_ib] mlx5_ib_post_send_nodrain+0xb/0x20 [mlx5_ib] ipoib_send+0x2ec/0x770 [ib_ipoib] ipoib_start_xmit+0x5a0/0x770 [ib_ipoib] dev_hard_start_xmit+0x8e/0x1e0 ? validate_xmit_skb_list+0x4d/0x80 sch_direct_xmit+0x116/0x3a0 __dev_xmit_skb+0x1fd/0x580 __dev_queue_xmit+0x284/0x6b0 ? _raw_spin_unlock_irq+0xe/0x50 ? __flush_work.isra.0+0x20d/0x370 ? push_pseudo_header+0x17/0x40 [ib_ipoib] neigh_connected_output+0xcd/0x110 ip_finish_output2+0x179/0x480 ? __smp_call_single_queue+0x61/0xa0 __ip_finish_output+0xc3/0x190 ip_finish_output+0x2e/0xf0 ip_output+0x78/0x110 ? __pfx_ip_finish_output+0x10/0x10 ip_local_out+0x64/0x70 __ip_queue_xmit+0x18a/0x460 ip_queue_xmit+0x15/0x30 __tcp_transmit_skb+0x914/0x9c0 tcp_write_xmit+0x334/0x8d0 tcp_push_one+0x3c/0x60 tcp_sendmsg_locked+0x2e1/0xac0 tcp_sendmsg+0x2d/0x50 inet_sendmsg+0x43/0x90 sock_sendmsg+0x68/0x80 sock_write_iter+0x93/0x100 vfs_write+0x326/0x3c0 ksys_write+0xbd/0xf0 ? do_syscall_64+0x69/0x90 __x64_sys_write+0x19/0x30 do_syscall_ ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-debug | Jul 3, 2024 | Apr 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.153-100.162Upgrade kernel-livepatch-5.10.214-202.855Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool | Dec 20, 2024 | Apr 17, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Jul 16, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | Apr 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Jul 17, 2024 | Apr 17, 2024 |
| Oracle_linux | — | Upgrade kernel | Jul 3, 2024 | Apr 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 3, 2024 | Apr 17, 2024 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-rt-modules-extra | Jul 16, 2024 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade dtb-armUpgrade kernel-rt-develUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade kernel-devel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-hisiliconUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-apmUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-manUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade dtb-alteraUpgrade kernel-debugUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-azure-baseUpgrade dtb-lgUpgrade dtb-caviumUpgrade dtb-amlogicUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-syms-azureUpgrade dtb-renesasUpgrade kernel-rt_debug-develUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-default-extra | May 15, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1057-ibmUpgrade linux-image-5.4.0-190-genericUpgrade linux-image-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1076-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1060-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1060-gkeUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1113-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1066-azureUpgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-5.15.0-1030-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-113-generic-lpaeUpgrade linux-image-5.4.0-1096-gkeopUpgrade linux-image-5.15.0-112-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtualUpgrade linux-image-bluefieldUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-1129-awsUpgrade linux-image-5.4.0-1089-bluefieldUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-113-genericUpgrade linux-image-raspi2Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-112-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1133-gcpUpgrade linux-image-5.15.0-110-lowlatency-64kUpgrade linux-image-5.15.0-113-generic-64kUpgrade linux-image-5.15.0-1062-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1058-nvidiaUpgrade linux-image-5.4.0-1048-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1058-nvidia-lowlatencyUpgrade linux-image-5.15.0-1056-ibmUpgrade linux-image-5.4.0-1117-kvmUpgrade linux-image-5.4.0-1041-iotUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1063-awsUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-190-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-5.15.0-1046-gkeopUpgrade linux-image-5.4.0-190-lowlatencyUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1134-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-110-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1061-oracleUpgrade linux-image-5.15.0-112-generic-lpae | Jul 1, 2024 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub