In the Linux kernel, the following vulnerability has been resolved:
epoll: be better about file lifetimes
epoll can call out to vfs_poll() with a file pointer that may race with the last 'fput()'. That would make f_count go down to zero, and while the ep->mtx locking means that the resulting file pointer tear-down will be blocked until the poll returns, it means that f_count is already dead, and any use of it won't actually get a reference to the file any more: it's dead regardless.
Make sure we have a valid ref on the file pointer before we call down to vfs_poll() from the epoll routines.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64kUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-coreUpgrade kernelUpgrade kernel-64k-debug-coreUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade rvUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-coreUpgrade kernel-docUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-tools-libs | Nov 4, 2024 | Jun 19, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-livepatch-5.15.161-106.159Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-devel | May 22, 2025 | Jun 19, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-headers | Jun 11, 2025 | Jun 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Dec 5, 2024 | Jun 19, 2024 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-headersUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-coreUpgrade kernel-uki-virtUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-rt-coreUpgrade bpftool-debuginfoUpgrade libperfUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade python3-perfUpgrade rtlaUpgrade rvUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade perfUpgrade libperf-debuginfo | Aug 1, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade dtb-marvellUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade kernel-syms-rtUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-default-manUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade dlm-kmp-rtUpgrade kernel-azure-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-devel-azureUpgrade kernel-rt-livepatchUpgrade dtb-armUpgrade kernel-rt-extraUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-obs-qaUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade cluster-md-kmp-default | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-intelUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1067-oracle | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub