In the Linux kernel, the following vulnerability has been resolved:
nvme-pci: fix freeing of the HMB descriptor table
The HMB descriptor table is sized to the maximum number of descriptors that could be used for a given device, but __nvme_alloc_host_mem could break out of the loop earlier on memory allocation failure and end up using less descriptors than planned for, which leads to an incorrect size passed to dma_free_coherent.
In practice this was not showing up because the number of descriptors tends to be low and the dma coherent allocator always allocates and frees at least a page.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernel-develUpgrade kernel-livepatch-5.10.233-223.887Upgrade kernel-debuginfo | Mar 14, 2025 | Dec 29, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-libbpfUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.124-134.200 | Mar 27, 2025 | Dec 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Apr 11, 2025 | Dec 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Mar 19, 2025 | Dec 29, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Apr 1, 2025 | Dec 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 11, 2025 | Dec 29, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 29, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1116-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1074-nvidiaUpgrade linux-image-4.15.0-1196-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1079-gcpUpgrade linux-image-nvidia-6.8Upgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-fips-4.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-135-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-136-generic-64kUpgrade linux-image-5.15.0-136-generic-lpaeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1090-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-virtualUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-4.15.0-1143-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1080-aws-fipsUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-5.15.0-1072-ibmUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-azure-edgeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-211-genericUpgrade linux-image-5.15.0-135-generic-lpaeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-4.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-5.15.0-135-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1077-oracleUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-4.15.0-1188-awsUpgrade linux-image-azure-fips-4.15Upgrade linux-image-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.4.0-1142-aws-fipsUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1081-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1142-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1086-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-4.15.0-246-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-nvidia-tegraUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.4.0-1147-azure-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1075-intel-iotgUpgrade linux-image-4.15.0-2105-azure-fipsUpgrade linux-image-5.4.0-1088-ibmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1084-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-5.4.0-1145-gcp-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-1086-azure-fdeUpgrade linux-image-5.15.0-135-genericUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-5.4.0-211-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-246-genericUpgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-fips-4.15Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-5.15.0-1077-intel-iotgUpgrade linux-image-5.15.0-135-lowlatencyUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.15.0-136-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1073-intel-iot-realtimeUpgrade linux-image-5.15.0-1076-kvmUpgrade linux-image-4.15.0-1181-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-4.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1140-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1074-nvidia-lowlatencyUpgrade linux-image-gcp-4.15Upgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-5.4.0-1101-bluefieldUpgrade linux-image-5.15.0-1079-gcp-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1074-raspiUpgrade linux-image-4.15.0-2089-gcp-fipsUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1062-gkeopUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-osp1Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-4.15.0-1150-oracleUpgrade linux-image-5.15.0-1074-ibmUpgrade linux-image-5.15.0-1080-awsUpgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intelUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-azure-4.15Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-5.4.0-1147-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1060-xilinx-zynqmpUpgrade linux-image-4.15.0-2126-aws-fipsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1129-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1083-azure-fipsUpgrade linux-image-4.15.0-1170-kvmUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-135-generic-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-1077-gkeUpgrade linux-image-5.4.0-1145-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-5.15.0-1080-realtimeUpgrade linux-image-raspi2Upgrade linux-image-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oemUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-211-lowlatency | Feb 20, 2025 | Dec 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub