In the Linux kernel, the following vulnerability has been resolved:
vhost_task: Handle SIGKILL by flushing work and exiting
Instead of lingering until the device is closed, this has us handle SIGKILL by:
1. marking the worker as killed so we no longer try to use it with new virtqueues and new flush operations. 2. setting the virtqueue to worker mapping so no new works are queued. 3. running all the exiting works.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Jul 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-genericUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-lowlatency | Nov 4, 2024 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub