In the Linux kernel, the following vulnerability has been resolved:
ALSA: timer: Set lower bound of start tick time
Currently ALSA timer doesn't have the lower limit of the start tick time, and it allows a very small size, e.g. 1 tick with 1ns resolution for hrtimer. Such a situation may lead to an unexpected RCU stall, where the callback repeatedly queuing the expire update, as reported by fuzzer.
This patch introduces a sanity check of the timer start tick time, so that the system returns an error when a too small start size is set. As of this patch, the lower limit is hard-coded to 100us, which is small enough but can still work somehow.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | Jun 19, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 16, 2024 | Jun 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade dtb-armUpgrade kernel-default-optionalUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-syms-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-baseUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-cavium | Jul 10, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-192-generic-lpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.4.0-1042-iotUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.4.0-1077-ibmUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-raspi2Upgrade linux-image-oracle-64kUpgrade linux-image-intelUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1090-bluefieldUpgrade linux-image-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-5.4.0-1135-azureUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-5.4.0-1134-gcpUpgrade linux-image-5.4.0-1114-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1130-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1118-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-192-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1049-xilinx-zynqmpUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-5.4.0-192-lowlatencyUpgrade linux-image-oemUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1129-oracleUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-5.4.0-1097-gkeop | Aug 9, 2024 | Jun 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub