In the Linux kernel, the following vulnerability has been resolved:
riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL
When userspace does PR_SET_TAGGED_ADDR_CTRL, but Supm extension is not available, the kernel crashes:
Oops - illegal instruction [#1] [snip] epc : set_tagged_addr_ctrl+0x112/0x15a ra : set_tagged_addr_ctrl+0x74/0x15a epc : ffffffff80011ace ra : ffffffff80011a30 sp : ffffffc60039be10 [snip] status: 0000000200000120 badaddr: 0000000010a79073 cause: 0000000000000002 set_tagged_addr_ctrl+0x112/0x15a __riscv_sys_prctl+0x352/0x73c do_trap_ecall_u+0x17c/0x20c andle_exception+0x150/0x15c
Fix it by checking if Supm is available.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-oracle-6.14Upgrade linux-image-awsUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-azure-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-gcpUpgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-raspi-6.14Upgrade linux-image-azureUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-realtime-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-virtual-6.14 | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub