In the Linux kernel, the following vulnerability has been resolved:
soc: fsl: qbman: Use raw spinlock for cgr_lock
smp_call_function always runs its callback in hard IRQ context, even on PREEMPT_RT, where spinlocks can sleep. So we need to use a raw spinlock for cgr_lock to ensure we aren't waiting on a sleeping task.
Although this bug has existed for a while, it was not apparent until commit ef2a8d5478b9 ("net: dpaa: Adjust queue depth on rate change") which invokes smp_call_function_single via qman_update_cgr_safe every time a link goes up or down.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-default-manUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amazonUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-default-develUpgrade dtb-qcomUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-rt-livepatchUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade dtb-alteraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-develUpgrade dtb-sprdUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade kernel-debugUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-baseUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-devel-rtUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade dtb-caviumUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-debug-devel | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-intel-iotgUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oemUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-raspiUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-1009-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-azureUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1060-nvidia-lowlatency | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub