In the Linux kernel, the following vulnerability has been resolved:
soc: fsl: qbman: Use raw spinlock for cgr_lock
smp_call_function always runs its callback in hard IRQ context, even on PREEMPT_RT, where spinlocks can sleep. So we need to use a raw spinlock for cgr_lock to ensure we aren't waiting on a sleeping task.
Although this bug has existed for a while, it was not apparent until commit ef2a8d5478b9 ("net: dpaa: Adjust queue depth on rate change") which invokes smp_call_function_single via qman_update_cgr_safe every time a link goes up or down.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-default-manUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatchUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-debugUpgrade kernel-azure-baseUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade dtb-sprdUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dtb-mediatekUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-develUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade kernel-develUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-rt-extra | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-intelUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04 | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub