In the Linux kernel, the following vulnerability has been resolved:
perf/aux: Fix AUX buffer serialization
Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to fully serialize it.
Note that in the lock order comment the perf_event::mmap_mutex order was already wrong, that is, it nesting under mmap_lock is not new with this patch.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-coreUpgrade rtlaUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade kernel-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-develUpgrade kernel-debug-modules-coreUpgrade libperfUpgrade kernelUpgrade kernel-debug-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debugUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-64k-debug-coreUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64kUpgrade kernel-rt-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-uki-virtUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-64k-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade perfUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-64k-debugUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-devel-matched | Jan 14, 2025 | Sep 13, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perfUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.167-112.165Upgrade kernel-livepatch-5.10.226-214.879Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-devel | Oct 3, 2024 | Sep 13, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.111-120.187Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernelUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade python3-perf-debuginfo | Feb 17, 2025 | Sep 13, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftool | Dec 12, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Dec 12, 2024 | Sep 13, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Nov 21, 2024 | Sep 13, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jan 10, 2025 | Sep 13, 2024 |
| Suse | — | Upgrade kernel-source-rtUpgrade dtb-amdUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-debugUpgrade dtb-appleUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-defaultUpgrade kernel-docsUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-rt-vdsoUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-docs-htmlUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rt_debugUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kernel-rtUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade dtb-lgUpgrade dtb-freescaleUpgrade dtb-armUpgrade kernel-syms-rtUpgrade kernel-syms | Dec 5, 2025 | Jan 9, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-virtualUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-intelUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-oracle-64k | Nov 12, 2024 | Sep 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub