In the Linux kernel, the following vulnerability has been resolved:
epoll: be better about file lifetimes
epoll can call out to vfs_poll() with a file pointer that may race with the last 'fput()'. That would make f_count go down to zero, and while the ep->mtx locking means that the resulting file pointer tear-down will be blocked until the poll returns, it means that f_count is already dead, and any use of it won't actually get a reference to the file any more: it's dead regardless.
Make sure we have a valid ref on the file pointer before we call down to vfs_poll() from the epoll routines.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-coreUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-64k-develUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade python3-perfUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-coreUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade bpftoolUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-64kUpgrade kernelUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-cross-headers | Nov 4, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.161-106.159Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-headers | May 22, 2025 | Jun 19, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Jun 11, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade bpftoolUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdump-debuginfoUpgrade libperf-debuginfoUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-debug-modules-coreUpgrade kernel-headersUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade libperfUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-devel-matchedUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade bpftool-debuginfoUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matchedUpgrade perf-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-core | Aug 1, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-defaultUpgrade kernel-azureUpgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-rt-vdsoUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade dtb-armUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade dtb-alteraUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade gfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dtb-marvellUpgrade dtb-appleUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade kernel-azure-baseUpgrade dtb-amazonUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-develUpgrade dtb-sprdUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-genericUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-raspi | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub