In the Linux kernel, the following vulnerability has been resolved:
nvmet: always initialize cqe.result
The spec doesn't mandate that the first two double words (aka results) for the command queue entry need to be set to 0 when they are not used (not specified). Though, the target implemention returns 0 for TCP and FC but not for RDMA.
Let's make RDMA behave the same and thus explicitly initializing the result field. This prevents leaking any data from the stack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 9, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Nov 5, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 15, 2025 | Jul 29, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade kernel-azure-baseUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-default-manUpgrade kernel-rt_debug-livepatch-develUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-symsUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-sprdUpgrade kernel-64kbUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade dtb-armUpgrade dtb-lgUpgrade dtb-alteraUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuild | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtualUpgrade linux-image-azure-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-nvidia-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-nvidia-tegraUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-genericUpgrade linux-image-fips-5.15Upgrade linux-image-intelUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-realtime-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-oracleUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-azure-fde-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-186-generic | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub