In the Linux kernel, the following vulnerability has been resolved:
comedi: Flush partial mappings in error case
If some remap_pfn_range() calls succeeded before one failed, we still have buffer pages mapped into the userspace page tables when we drop the buffer reference with comedi_buf_map_put(bm). The userspace mappings are only cleaned up later in the mmap error path.
Fix it by explicitly flushing all mappings in our VMA on the error path.
See commit 79a61cc3fc04 ("mm: avoid leaving partial pfn mappings around in error case").
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 24, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 24, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-fipsUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-136-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-aws-fipsUpgrade linux-image-bluefieldUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-oemUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-5.4.0-1142-awsUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-5.4.0-211-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.4.0-1129-raspi | Feb 20, 2025 | Dec 24, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub