In the Linux kernel, the following vulnerability has been resolved:
tun: limit printing rate when illegal packet received by tun dev
vhost_worker will call tun call backs to receive packets. If too many illegal packets arrives, tun_do_read will keep dumping packet contents. When console is enabled, it will costs much more cpu time to dump packet and soft lockup will be detected.
net_ratelimit mechanism can be used to limit the dumping rate.
PID: 33036 TASK: ffff949da6f20000 CPU: 23 COMMAND: "vhost-32980" #0 [fffffe00003fce50] crash_nmi_callback at ffffffff89249253 #1 [fffffe00003fce58] nmi_handle at ffffffff89225fa3 #2 [fffffe00003fceb0] default_do_nmi at ffffffff8922642e #3 [fffffe00003fced0] do_nmi at ffffffff8922660d #4 [fffffe00003fcef0] end_repeat_nmi at ffffffff89c01663 [exception RIP: io_serial_in+20] RIP: ffffffff89792594 RSP: ffffa655314979e8 RFLAGS: 00000002 RAX: ffffffff89792500 RBX: ffffffff8af428a0 RCX: 0000000000000000 RDX: 00000000000003fd RSI: 0000000000000005 RDI: ffffffff8af428a0 RBP: 0000000000002710 R8: 0000000000000004 R9: 000000000000000f R10: 0000000000000000 R11: ffffffff8acbf64f R12: 0000000000000020 R13: ffffffff8acbf698 R14: 0000000000000058 R15: 0000000000000000 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #5 [ffffa655314979e8] io_serial_in at ffffffff89792594 #6 [ffffa655314979e8] wait_for_xmitr at ffffffff89793470 #7 [ffffa65531497a08] serial8250_console_putchar at ffffffff897934f6 #8 [ffffa65531497a20] uart_console_write at ffffffff8978b605 #9 [ffffa65531497a48] serial8250_console_write at ffffffff89796558 #10 [ffffa65531497ac8] console_unlock at ffffffff89316124 #11 [ffffa65531497b10] vprintk_emit at ffffffff89317c07 #12 [ffffa65531497b68] printk at ffffffff89318306 #13 [ffffa65531497bc8] print_hex_dump at ffffffff89650765 #14 [ffffa65531497ca8] tun_do_read at ffffffffc0b06c27 [tun] #15 [ffffa65531497d38] tun_recvmsg at ffffffffc0b06e34 [tun] #16 [ffffa65531497d68] handle_rx at ffffffffc0c5d682 [vhost_net] #17 [ffffa65531497ed0] vhost_worker at ffffffffc0c644dc [vhost] #18 [ffffa65531497f10] kthread at ffffffff892d2e72 #19 [ffffa65531497f50] ret_from_fork at ffffffff89c0022f
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade perf | Sep 26, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.216-204.855Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.158-103.164Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-4.14.348-265.562Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headers | Aug 2, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.90-99.173Upgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-debug-coreUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-rt | Oct 2, 2024 | May 1, 2024 |
| Suse | — | Upgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-renesasUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade kernel-azure-baseUpgrade kernel-debug-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-lgUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade kernel-default-manUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade dtb-amdUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-64kb | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-cvmUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1170-awsUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-4.4.0-1173-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1179-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-4.15.0-227-genericUpgrade linux-image-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-aws-hweUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-258-genericUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-ibm | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub