In the Linux kernel, the following vulnerability has been resolved:
tee: optee: Fix kernel panic caused by incorrect error handling
The error path while failing to register devices on the TEE bus has a bug leading to kernel panic as follows:
[ 15.398930] Unable to handle kernel paging request at virtual address ffff07ed00626d7c [ 15.406913] Mem abort info: [ 15.409722] ESR = 0x0000000096000005 [ 15.413490] EC = 0x25: DABT (current EL), IL = 32 bits [ 15.418814] SET = 0, FnV = 0 [ 15.421878] EA = 0, S1PTW = 0 [ 15.425031] FSC = 0x05: level 1 translation fault [ 15.429922] Data abort info: [ 15.432813] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 15.438310] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 15.443372] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 15.448697] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000000d9e3e000 [ 15.455413] [ffff07ed00626d7c] pgd=1800000bffdf9003, p4d=1800000bffdf9003, pud=0000000000000000 [ 15.464146] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP
Commit 7269cba53d90 ("tee: optee: Fix supplicant based device enumeration") lead to the introduction of this bug. So fix it appropriately.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-azureUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.15.0-1068-azure | Jul 16, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 17, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub