In the Linux kernel, the following vulnerability has been resolved:
posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
If get_clock_desc() succeeds, it calls fget() for the clockid's fd, and get the clk->rwsem read lock, so the error path should release the lock to make the lock balance and fput the clockid's fd to make the refcount balance and release the fd related resource.
However the below commit left the error path locked behind resulting in unbalanced locking. Check timespec64_valid_strict() before get_clock_desc() to fix it, because the "ts" is not changed after that.
[[email protected]: fixed commit message typo]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.230-223.885 | Mar 14, 2025 | Nov 8, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Nov 8, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Mar 19, 2025 | Nov 8, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perf | Apr 1, 2025 | Nov 8, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Nov 8, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-awsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-gcp-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-generic | Apr 24, 2025 | Nov 8, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Nov 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub