In the Linux kernel, the following vulnerability has been resolved:
fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
The first kiocb_set_cancel_fn() argument may point at a struct kiocb that is not embedded inside struct aio_kiocb. With the current code, depending on the compiler, the req->ki_ctx read happens either before the IOCB_AIO_RW test or after that test. Move the req->ki_ctx read such that it is guaranteed that the IOCB_AIO_RW test happens first.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.345-262.561Upgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.156-102.160Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade bpftool | Sep 16, 2024 | May 17, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.84-99.169Upgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel-debuginfo | Feb 17, 2025 | May 17, 2024 |
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 17, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-mediatekUpgrade kernel-docsUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade dtb-nvidiaUpgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-rt-extraUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade kernel-azureUpgrade kernel-64kb-livepatch-develUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt-optional | Jun 13, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-raspiUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-oem-20.04Upgrade linux-image-ibmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-oracle | Jul 15, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 17, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub