In the Linux kernel, the following vulnerability has been resolved:
x86/entry_32: Clear CPU buffers after register restore in NMI return
CPU buffers are currently cleared after call to exc_nmi, but before register state is restored. This may be okay for MDS mitigation but not for RDFS. Because RDFS mitigation requires CPU buffers to be cleared when registers don't have any sensitive data.
Move CLEAR_CPU_BUFFERS after RESTORE_ALL_NMI.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1060-gkeopUpgrade linux-image-5.15.0-133-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1072-nvidiaUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1070-ibmUpgrade linux-image-5.15.0-1072-nvidia-lowlatencyUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-133-generic-lpaeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-genericUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-134-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-azureUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.15.0-1075-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-133-genericUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-134-generic-lpaeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-intelUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.15.0-133-lowlatency-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-56-genericUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-5.15.0-1081-azure-fdeUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1073-intel-iotgUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-5.15.0-133-lowlatencyUpgrade linux-image-5.15.0-1072-raspiUpgrade linux-image-5.15.0-1075-gkeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-5.15.0-1081-azureUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-134-genericUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1077-gcpUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeop-6.8 | Feb 20, 2025 | Nov 8, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Nov 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub