In the Linux kernel, the following vulnerability has been resolved:
powerpc/pseries: Whitelist dtl slub object for copying to userspace
Reading the dispatch trace log from /sys/kernel/debug/powerpc/dtl/cpu-* results in a BUG() when the config CONFIG_HARDENED_USERCOPY is enabled as shown below.
kernel BUG at mm/usercopy.c:102! Oops: Exception in kernel mode, sig: 5 [#1] LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA pSeries Modules linked in: xfs libcrc32c dm_service_time sd_mod t10_pi sg ibmvfc scsi_transport_fc ibmveth pseries_wdt dm_multipath dm_mirror dm_region_hash dm_log dm_mod fuse CPU: 27 PID: 1815 Comm: python3 Not tainted 6.10.0-rc3 #85 Hardware name: IBM,9040-MRX POWER10 (raw) 0x800200 0xf000006 of:IBM,FW1060.00 (NM1060_042) hv:phyp pSeries NIP: c0000000005d23d4 LR: c0000000005d23d0 CTR: 00000000006ee6f8 REGS: c000000120c078c0 TRAP: 0700 Not tainted (6.10.0-rc3) MSR: 8000000000029033 <SF,EE,ME,IR,DR,RI,LE> CR: 2828220f XER: 0000000e CFAR: c0000000001fdc80 IRQMASK: 0 [ ... GPRs omitted ... ] NIP [c0000000005d23d4] usercopy_abort+0x78/0xb0 LR [c0000000005d23d0] usercopy_abort+0x74/0xb0 Call Trace: usercopy_abort+0x74/0xb0 (unreliable) __check_heap_object+0xf8/0x120 check_heap_object+0x218/0x240 __check_object_size+0x84/0x1a4 dtl_file_read+0x17c/0x2c4 full_proxy_read+0x8c/0x110 vfs_read+0xdc/0x3a0 ksys_read+0x84/0x144 system_call_exception+0x124/0x330 system_call_vectored_common+0x15c/0x2ec --- interrupt: 3000 at 0x7fff81f3ab34
Commit 6d07d1cd300f ("usercopy: Restrict non-usercopy caches to size 0") requires that only whitelisted areas in slab/slub objects can be copied to userspace when usercopy hardening is enabled using CONFIG_HARDENED_USERCOPY. Dtl contains hypervisor dispatch events which are expected to be read by privileged users. Hence mark this safe for user access. Specify useroffset=0 and usersize=DISPATCH_LOG_BYTES to whitelist the entire object.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade perfUpgrade kernel-docUpgrade python3-perfUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump | Sep 26, 2024 | Jul 29, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 14, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debug-modulesUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-debuginfoUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade python3-perf | May 8, 2025 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-armUpgrade dtb-qcomUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-sprdUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-syms-azureUpgrade dlm-kmp-rtUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-kvmsmallUpgrade kernel-obs-buildUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade kernel-rt_debug-develUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade kernel-default-livepatchUpgrade dtb-mediatekUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-xilinxUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade dtb-appleUpgrade kernel-rt-develUpgrade kernel-default-optional | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-oemUpgrade linux-image-oem-20.04bUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-intelUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1135-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1139-azureUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-awsUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.4.0-1140-azureUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-20.04 | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub