In the Linux kernel, the following vulnerability has been resolved:
powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
Smatch warns:
arch/powerpc/kernel/rtas.c:1932 __do_sys_rtas() warn: potential spectre issue 'args.args' [r] (local cap)
The 'nargs' and 'nret' locals come directly from a user-supplied buffer and are used as indexes into a small stack-based array and as inputs to copy_to_user() after they are subject to bounds checks.
Use array_index_nospec() after the bounds checks to clamp these values for speculative execution.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 29, 2025 | Sep 18, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-default-manUpgrade kernel-docs-htmlUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade dtb-lgUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade kernel-azure-livepatch-develUpgrade dtb-marvellUpgrade kernel-rtUpgrade kernel-macrosUpgrade dtb-sprdUpgrade kernel-preemptUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dtb-rockchipUpgrade kernel-default-livepatchUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade ocfs2-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-preempt-develUpgrade kernel-default-vdsoUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-source-azureUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade kernel-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kbUpgrade cluster-md-kmp-default | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-virtualUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-raspiUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidiaUpgrade linux-image-virtual-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-64kUpgrade linux-image-generic-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-azureUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-genericUpgrade linux-image-aws-fips-5.15Upgrade linux-image-kvmUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1083-intel-iotg | Dec 13, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub