In the Linux kernel, the following vulnerability has been resolved:
soc: fsl: qbman: Use raw spinlock for cgr_lock
smp_call_function always runs its callback in hard IRQ context, even on PREEMPT_RT, where spinlocks can sleep. So we need to use a raw spinlock for cgr_lock to ensure we aren't waiting on a sleeping task.
Although this bug has existed for a while, it was not apparent until commit ef2a8d5478b9 ("net: dpaa: Adjust queue depth on rate change") which invokes smp_call_function_single via qman_update_cgr_safe every time a link goes up or down.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | May 17, 2024 |
| Suse | — | Upgrade kernel-docsUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-debugUpgrade dtb-sprdUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade dtb-xilinxUpgrade kernel-rt_debugUpgrade dtb-armUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-source-rtUpgrade kernel-azure-baseUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-vdsoUpgrade dtb-lgUpgrade dtb-apmUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-extraUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade kernel-default-manUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-qcom | Jun 24, 2024 | May 17, 2024 |
| Ubuntu | — | Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-awsUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-bluefieldUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi2Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-osp1Upgrade linux-image-azureUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-oemUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-raspiUpgrade linux-image-gkeUpgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-generic-64k | Jul 1, 2024 | May 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub