In the Linux kernel, the following vulnerability has been resolved:
nvmet: always initialize cqe.result
The spec doesn't mandate that the first two double words (aka results) for the command queue entry need to be set to 0 when they are not used (not specified). Though, the target implemention returns 0 for TCP and FC but not for RDMA.
Let's make RDMA behave the same and thus explicitly initializing the result field. This prevents leaking any data from the stack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftool | Oct 9, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Nov 5, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 15, 2025 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Dec 5, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade kernel-source-rtUpgrade kernel-default-manUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade kernel-azure-baseUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-marvellUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade dtb-alteraUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade dtb-armUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade dtb-qcomUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-rtUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-apm | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-oracle-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-gcp-fipsUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-azure-fde-5.15Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-fips-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04bUpgrade linux-image-genericUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azureUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-intelUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-24.04 | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub