In the Linux kernel, the following vulnerability has been resolved:
vmci: prevent speculation leaks by sanitizing event in event_deliver()
Coverity spotted that event_msg is controlled by user-space, event_msg->event_data.event is passed to event_deliver() and used as an index without sanitization.
This change ensures that the event index is sanitized to mitigate any possibility of speculative information leaks.
This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.
Only compile tested, no access to HW.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade bpftoolUpgrade perfUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-docUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modules | Sep 26, 2024 | Jul 12, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.162-107.160Upgrade kernel-headersUpgrade kernel-livepatch-5.10.223-211.872Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-livepatch-4.14.350-266.564Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.96-102.177Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade python3-perfUpgrade perfUpgrade bpftool | Oct 16, 2025 | Jul 12, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 17, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Oct 9, 2024 | Jul 12, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 8, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade perf-debuginfoUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-coreUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-rt-kvm | Oct 2, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-azureUpgrade kernel-defaultUpgrade kernel-macrosUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-devel-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade dtb-sprdUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-syms-rtUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-manUpgrade kernel-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-symsUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade dtb-amazonUpgrade dlm-kmp-azure | Aug 14, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.4.0-1132-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1072-azureUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1043-iotUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-intelUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oemUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-gcpUpgrade linux-image-5.15.0-121-lowlatency | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub