In the Linux kernel, the following vulnerability has been resolved:
powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
The dtl_access_lock needs to be a rw_sempahore, a sleeping lock, because the code calls kmalloc() while holding it, which can sleep:
# echo 1 > /proc/powerpc/vcpudispatch_stats BUG: sleeping function called from invalid context at include/linux/sched/mm.h:337 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 199, name: sh preempt_count: 1, expected: 0 3 locks held by sh/199: #0: c00000000a0743f8 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x324/0x438 #1: c0000000028c7058 (dtl_enable_mutex){+.+.}-{3:3}, at: vcpudispatch_stats_write+0xd4/0x5f4 #2: c0000000028c70b8 (dtl_access_lock){+.+.}-{2:2}, at: vcpudispatch_stats_write+0x220/0x5f4 CPU: 0 PID: 199 Comm: sh Not tainted 6.10.0-rc4 #152 Hardware name: IBM pSeries (emulated by qemu) POWER9 (raw) 0x4e1202 0xf000005 of:SLOF,HEAD hv:linux,kvm pSeries Call Trace: dump_stack_lvl+0x130/0x148 (unreliable) __might_resched+0x174/0x410 kmem_cache_alloc_noprof+0x340/0x3d0 alloc_dtl_buffers+0x124/0x1ac vcpudispatch_stats_write+0x2a8/0x5f4 proc_reg_write+0xf4/0x150 vfs_write+0xfc/0x438 ksys_write+0x88/0x148 system_call_exception+0x1c4/0x5a0 system_call_common+0xf4/0x258
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 28, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 28, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 28, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-intelUpgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-fipsUpgrade linux-image-virtualUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-azureUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-azure-nvidiaUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-oracle-64k-lts-24.04 | Feb 20, 2025 | Dec 28, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 28, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub