In the Linux kernel, the following vulnerability has been resolved:
perf/aux: Fix AUX buffer serialization
Ole reported that event->mmap_mutex is strictly insufficient to serialize the AUX buffer, add a per RB mutex to fully serialize it.
Note that in the lock order comment the perf_event::mmap_mutex order was already wrong, that is, it nesting under mmap_lock is not new with this patch.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64kUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-modules-coreUpgrade libperfUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-64k-debug-coreUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernelUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-abi-stablelistsUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-rt-debugUpgrade rvUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-modules-extra | Jan 14, 2025 | Sep 13, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.226-214.879Upgrade kernel-headersUpgrade kernel-livepatch-5.15.167-112.165Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfo | Oct 3, 2024 | Sep 13, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.111-120.187Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools | Feb 17, 2025 | Sep 13, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Dec 12, 2024 | Sep 13, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools | Dec 12, 2024 | Sep 13, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 21, 2024 | Sep 13, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jan 10, 2025 | Sep 13, 2024 |
| Suse | — | Upgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-sourceUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-default-manUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-rt_debugUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-source-rtUpgrade kernel-64kb-extraUpgrade kernel-obs-build | Dec 5, 2025 | Jan 9, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-20.04cUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-intelUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-awsUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04 | Nov 12, 2024 | Sep 13, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub