In the Linux kernel, the following vulnerability has been resolved:
irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
Kunkun Jiang reported that there is a small window of opportunity for userspace to force a change of affinity for a VPE while the VPE has already been unmapped, but the corresponding doorbell interrupt still visible in /proc/irq/.
Plug the race by checking the value of vmapp_count, which tracks whether the VPE is mapped ot not, and returning an error in this case.
This involves making vmapp_count common to both GICv4.1 and its v4.0 ancestor.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64kUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-uki-virt-addonsUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade python3-perfUpgrade kernelUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-64k-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade rvUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade libperfUpgrade kernel-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-64k-coreUpgrade kernel-debug-develUpgrade kernel-rt-modules-coreUpgrade rtla | Dec 19, 2024 | Nov 8, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-livepatch-5.10.228-219.884Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.173-118.169Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-tools | Mar 14, 2025 | Nov 8, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel | Mar 27, 2025 | Nov 8, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 8, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftool | Feb 11, 2025 | Nov 8, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Feb 11, 2025 | Nov 8, 2024 |
| Oracle_linux | — | Upgrade kernel | Dec 12, 2024 | Nov 8, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Feb 10, 2025 | Nov 8, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-coreUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-rt-debugUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rtUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo | Feb 5, 2026 | Dec 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-awsUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-azure-cvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-intelUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-genericUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-azure-lts-24.04 | Feb 20, 2025 | Nov 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub