In the Linux kernel, the following vulnerability has been resolved:
vmci: prevent speculation leaks by sanitizing event in event_deliver()
Coverity spotted that event_msg is controlled by user-space, event_msg->event_data.event is passed to event_deliver() and used as an index without sanitization.
This change ensures that the event index is sanitized to mitigate any possibility of speculative information leaks.
This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.
Only compile tested, no access to HW.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-docUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade perf | Sep 26, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.350-266.564Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.162-107.160Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade python3-perfUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfo | Oct 16, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 17, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 9, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 25, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-debugUpgrade kernel-default-manUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade kernel-64kbUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade dtb-socionextUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade dtb-lgUpgrade kernel-docsUpgrade dtb-amdUpgrade dtb-broadcomUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmallUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-devel-rt | Aug 14, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi2Upgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-azure-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-intelUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1069-awsUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.4.0-1132-aws | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub