In the Linux kernel, the following vulnerability has been resolved:
x86/fred: Correct speculative safety in fred_extint()
array_index_nospec() is no use if the result gets spilled to the stack, as it makes the believed safe-under-speculation value subject to memory predictions.
For all practical purposes, this means array_index_nospec() must be used in the expression that accesses the array.
As the code currently stands, it's the wrong side of irqentry_enter(), and 'index' is put into %ebp across the function call.
Remove the index variable and reposition array_index_nospec(), so it's calculated immediately before the array access.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-headersUpgrade bpftool6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade kernel6.12Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.18-libbpf-develUpgrade kernel6.12-modules-extraUpgrade perf6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade perf6.18-debuginfoUpgrade python3-perf6.18Upgrade kernel6.12-modules-extra-commonUpgrade bpftool6.12Upgrade kernel6.12-libbpf-develUpgrade kernel-livepatch-6.18.20-20.229Upgrade kernel6.12-tools-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel-livepatch-6.12.77-99.140Upgrade kernel6.18-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel6.18-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-toolsUpgrade kernel6.18-headersUpgrade kernel6.18-develUpgrade kernel6.18-debuginfoUpgrade kernel6.12-libbpfUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.18-toolsUpgrade kernel6.12-develUpgrade bpftool6.18-debuginfoUpgrade perf6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade python3-perf6.12Upgrade kernel6.18-debuginfo-common-x86_64Upgrade perf6.12-debuginfoUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.18Upgrade python3-perf6.12-debuginfoUpgrade kernel6.18-modules-extra | Apr 9, 2026 | Mar 25, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub