In the Linux kernel, the following vulnerability has been resolved:
x86/lam: Disable ADDRESS_MASKING in most cases
Linear Address Masking (LAM) has a weakness related to transient execution as described in the SLAM paper[1]. Unless Linear Address Space Separation (LASS) is enabled this weakness may be exploitable.
Until kernel adds support for LASS[2], only allow LAM for COMPILE_TEST, or when speculation mitigations have been disabled at compile time, otherwise keep LAM disabled.
There are no processors in market that support LAM yet, so currently nobody is affected by this issue.
[1] SLAM: https://download.vusec.net/papers/slam_sp24.pdf [2] LASS: https://lore.kernel.org/lkml/[email protected]/
[ dhansen: update SPECULATION_MITIGATIONS -> CPU_MITIGATIONS ]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Nov 5, 2024 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-gkeop-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-genericUpgrade linux-image-6.11.0-1011-oracle | Feb 20, 2025 | Nov 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub