In the Linux kernel, the following vulnerability has been resolved:
posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
If get_clock_desc() succeeds, it calls fget() for the clockid's fd, and get the clk->rwsem read lock, so the error path should release the lock to make the lock balance and fput the clockid's fd to make the refcount balance and release the fd related resource.
However the below commit left the error path locked behind resulting in unbalanced locking. Check timespec64_valid_strict() before get_clock_desc() to fix it, because the "ts" is not changed after that.
[[email protected]: fixed commit message typo]
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-develUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perfUpgrade kernel-livepatch-5.10.230-223.885Upgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfo | Mar 14, 2025 | Nov 8, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Nov 8, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Mar 19, 2025 | Nov 8, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Apr 1, 2025 | Nov 8, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 17, 2024 | Nov 8, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 8, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-virtualUpgrade linux-image-azure-lts-24.04Upgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-realtimeUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-58-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-kvmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-azure | Apr 24, 2025 | Nov 8, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Nov 8, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub