In the Linux kernel, the following vulnerability has been resolved:
protect the fetch of ->fd[fd] in do_dup2() from mispredictions
both callers have verified that fd is not greater than ->max_fds; however, misprediction might end up with tofree = fdt->fd[fd]; being speculatively executed. That's wrong for the same reasons why it's wrong in close_fd()/file_close_fd_locked(); the same solution applies - array_index_nospec(fd, fdt->max_fds) could differ from fd only in case of speculative execution on mispredicted path.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-debugUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-docUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade bpftool | Sep 26, 2024 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 30, 2024 | Jul 30, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Nov 11, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Nov 26, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Nov 11, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Aug 17, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Sep 25, 2024 | Aug 17, 2024 |
| Rocky_linux | — | Upgrade kernel-coreUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-devel | May 8, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-default-manUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-rt-livepatchUpgrade dlm-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade dtb-amlogicUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-preemptUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-source-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade kselftests-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade dtb-freescaleUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade dtb-amdUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kernel-rt-develUpgrade dtb-broadcomUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-azure-baseUpgrade dtb-lgUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-preempt-develUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kernel-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-livepatch-devel | Dec 5, 2025 | Sep 27, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-200-genericUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-virtualUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-intelUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeop-5.4 | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub