In the Linux kernel, the following vulnerability has been resolved:
tun: limit printing rate when illegal packet received by tun dev
vhost_worker will call tun call backs to receive packets. If too many illegal packets arrives, tun_do_read will keep dumping packet contents. When console is enabled, it will costs much more cpu time to dump packet and soft lockup will be detected.
net_ratelimit mechanism can be used to limit the dumping rate.
PID: 33036 TASK: ffff949da6f20000 CPU: 23 COMMAND: "vhost-32980" #0 [fffffe00003fce50] crash_nmi_callback at ffffffff89249253 #1 [fffffe00003fce58] nmi_handle at ffffffff89225fa3 #2 [fffffe00003fceb0] default_do_nmi at ffffffff8922642e #3 [fffffe00003fced0] do_nmi at ffffffff8922660d #4 [fffffe00003fcef0] end_repeat_nmi at ffffffff89c01663 [exception RIP: io_serial_in+20] RIP: ffffffff89792594 RSP: ffffa655314979e8 RFLAGS: 00000002 RAX: ffffffff89792500 RBX: ffffffff8af428a0 RCX: 0000000000000000 RDX: 00000000000003fd RSI: 0000000000000005 RDI: ffffffff8af428a0 RBP: 0000000000002710 R8: 0000000000000004 R9: 000000000000000f R10: 0000000000000000 R11: ffffffff8acbf64f R12: 0000000000000020 R13: ffffffff8acbf698 R14: 0000000000000058 R15: 0000000000000000 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #5 [ffffa655314979e8] io_serial_in at ffffffff89792594 #6 [ffffa655314979e8] wait_for_xmitr at ffffffff89793470 #7 [ffffa65531497a08] serial8250_console_putchar at ffffffff897934f6 #8 [ffffa65531497a20] uart_console_write at ffffffff8978b605 #9 [ffffa65531497a48] serial8250_console_write at ffffffff89796558 #10 [ffffa65531497ac8] console_unlock at ffffffff89316124 #11 [ffffa65531497b10] vprintk_emit at ffffffff89317c07 #12 [ffffa65531497b68] printk at ffffffff89318306 #13 [ffffa65531497bc8] print_hex_dump at ffffffff89650765 #14 [ffffa65531497ca8] tun_do_read at ffffffffc0b06c27 [tun] #15 [ffffa65531497d38] tun_recvmsg at ffffffffc0b06e34 [tun] #16 [ffffa65531497d68] handle_rx at ffffffffc0c5d682 [vhost_net] #17 [ffffa65531497ed0] vhost_worker at ffffffffc0c644dc [vhost] #18 [ffffa65531497f10] kthread at ffffffff892d2e72 #19 [ffffa65531497f50] ret_from_fork at ffffffff89c0022f
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-docUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-kvm | Sep 26, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.348-265.562Upgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.158-103.164Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-5.10.216-204.855Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Aug 2, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-livepatch-6.1.90-99.173Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-debuginfo | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jul 17, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | May 1, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-rt-core | Oct 2, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-azureUpgrade dtb-socionextUpgrade dtb-caviumUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-azure-baseUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-64kbUpgrade kernel-debugUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-default-manUpgrade kernel-debug-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-freescaleUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade kernel-sourceUpgrade dtb-apmUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rt | May 15, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-4.15.0-227-genericUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-4.15.0-1179-azureUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.4.0-258-genericUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-4.4.0-258-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-aws-hweUpgrade linux-image-generic-lts-xenialUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-4.4.0-1136-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-genericUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-oemUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi2Upgrade linux-image-gkeopUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1135-awsUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1170-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1173-awsUpgrade linux-image-oem-osp1 | Jul 12, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub