CVE-2021-47400
NoneCVSS
—
EPSS
0.3%
Published
May 21, 2024
CISA due date
—
Cloudanix analysis
Schedule a fix
SSVC: Track
A Linux kernel network driver bug can crash the whole system when a network card reset happens at the same time as certain traffic-control changes.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Moderate
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Race Condition
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Missing state check allows hns3_nic_net_open to be invoked concurrently, resulting in napi_enable being executed twice and triggering a kernel BUG at net/core/dev.c:6991.
Why it matters to the business
Systems using hns3 network adapters may experience sudden kernel panics during device resets that overlap with traffic-class configuration, causing unplanned downtime and loss of network connectivity.
How an attack unfolds
An attacker with local privileges or the ability to trigger driver reset paths concurrently invokes hns3_nic_net_open while another thread is also calling it; the absent HNS3_NIC_STATE_DOWN guard permits the second napi_enable, crashing the kernel.
How to fix it
Apply a kernel containing the upstream fix that adds an early return when HNS3_NIC_STATE_DOWN is already cleared; rebuild and reboot with the updated kernel image.
How to confirm the fix worked
Confirm presence of the state-flag check before the napi_enable call inside hns3_nic_net_open and verify that repeated open attempts no longer produce the BUG at net/core/dev.c:6991.
Typical attack path
- Obtain local execution or trigger hclge_service_task reset path
- Concurrently initiate TC setup that also calls hns3_nic_net_open
- Second invocation bypasses state check and executes napi_enable twice
- Kernel hits BUG and panics
How to detect it
Search kernel logs and dmesg for the exact call trace containing napi_enable+0x80, hns3_reset_notify_up_enet, and hclge_service_task; correlate with hns3 module load times around the crash.
- kernel BUG at net/core/dev.c:6991
- hns3_reset_notify_up_enet+0x78/0xd0 [hns3]
- hclge_service_task+0xb0/0xb54 [hclge]
- napi_enable+0x80/0x84
What your security team should do
- Prioritize kernel update on all hosts exposing hns3 interfaces
- Monitor for the napi_enable call-trace pattern during maintenance windows
- Test reset-plus-TC concurrency scenarios in staging before production rollout
The record
In the Linux kernel, the following vulnerability has been resolved: net: hns3: do not allow call hns3_nic_net_open repeatedly hns3_nic_net_open() is not allowed to called repeatly, but there is no checking for this. When doing device reset and setup tc concurrently, there is a small oppotunity to call hns3_nic_net_open repeatedly, and cause kernel bug by calling napi_enable twice. The calltrace information is like below: [ 3078.222780] ------------[ cut here ]------------ [ 3078.230255] kernel BUG at net/core/dev.c:6991! [ 3078.236224] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP [ 3078.243431] Modules linked in: hns3 hclgevf hclge hnae3 vfio_iommu_type1 vfio_pci vfio_virqfd vfio pv680_mii(O) [ 3078.258880] CPU: 0 PID: 295 Comm: kworker/u8:5 Tainted: G O 5.14.0-rc4+ #1 [ 3078.269102] Hardware name: , BIOS KpxxxFPGA 1P B600 V181 08/12/2021 [ 3078.276801] Workqueue: hclge hclge_service_task [hclge] [ 3078.288774] pstate: 60400009 (nZCv daif +PAN -UAO -TCO BTYPE=--) [ 3078.296168] pc : napi_enable+0x80/0x84 tc qdisc sho[w 3d0e7v8 .e3t0h218 79] lr : hns3_nic_net_open+0x138/0x510 [hns3] [ 3078.314771] sp : ffff8000108abb20 [ 3078.319099] x29: ffff8000108abb20 x28: 0000000000000000 x27: ffff0820a8490300 [ 3078.329121] x26: 0000000000000001 x25: ffff08209cfc6200 x24: 0000000000000000 [ 3078.339044] x23: ffff0820a8490300 x22: ffff08209cd76000 x21: ffff0820abfe3880 [ 3078.349018] x20: 0000000000000000 x19: ffff08209cd76900 x18: 0000000000000000 [ 3078.358620] x17: 0000000000000000 x16: ffffc816e1727a50 x15: 0000ffff8f4ff930 [ 3078.368895] x14: 0000000000000000 x13: 0000000000000000 x12: 0000259e9dbeb6b4 [ 3078.377987] x11: 0096a8f7e764eb40 x10: 634615ad28d3eab5 x9 : ffffc816ad8885b8 [ 3078.387091] x8 : ffff08209cfc6fb8 x7 : ffff0820ac0da058 x6 : ffff0820a8490344 [ 3078.396356] x5 : 0000000000000140 x4 : 0000000000000003 x3 : ffff08209cd76938 [ 3078.405365] x2 : 0000000000000000 x1 : 0000000000000010 x0 : ffff0820abfe38a0 [ 3078.414657] Call trace: [ 3078.418517] napi_enable+0x80/0x84 [ 3078.424626] hns3_reset_notify_up_enet+0x78/0xd0 [hns3] [ 3078.433469] hns3_reset_notify+0x64/0x80 [hns3] [ 3078.441430] hclge_notify_client+0x68/0xb0 [hclge] [ 3078.450511] hclge_reset_rebuild+0x524/0x884 [hclge] [ 3078.458879] hclge_reset_service_task+0x3c4/0x680 [hclge] [ 3078.467470] hclge_service_task+0xb0/0xb54 [hclge] [ 3078.475675] process_one_work+0x1dc/0x48c [ 3078.481888] worker_thread+0x15c/0x464 [ 3078.487104] kthread+0x160/0x170 [ 3078.492479] ret_from_fork+0x10/0x18 [ 3078.498785] Code: c8027c81 35ffffa2 d50323bf d65f03c0 (d4210000) [ 3078.506889] ---[ end trace 8ebe0340a1b0fb44 ]--- Once hns3_nic_net_open() is excute success, the flag HNS3_NIC_STATE_DOWN will be cleared. So add checking for this flag, directly return when HNS3_NIC_STATE_DOWN is no set.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:9 | bpftool | 0 | 7.3.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-devel | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-devel | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-devel-matched | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules-extra | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-abi-stablelists | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-cross-headers | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-debug | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-debug-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-debug-devel | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-debug-devel-matched | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules-extra | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-debug-uki-virt | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-devel | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-devel-matched | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-doc | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-headers | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-modules | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-modules-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-modules-extra | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-rt | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-rt-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-devel | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-rt-devel | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules-extra | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-tools | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-tools-libs | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-tools-libs-devel | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-uki-virt | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | libperf | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | perf | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | python3-perf | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | rtla | 0 | 5.14.0-427.24.1.el9_4 |
| AlmaLinux:9 | rv | 0 | 5.14.0-427.24.1.el9_4 |
| Debian:11 | linux | 0 | 5.10.84-1 |
| Debian:12 | linux | 0 | 5.14.12-1 |
| Debian:13 | linux | 0 | 5.14.12-1 |
| Red Hat:enterprise_linux:9::appstream | bpftool | 0 | 0:7.3.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | bpftool-debuginfo | 0 | 0:7.3.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel-matched | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-extra | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-cross-headers | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-uki-virt | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel-matched | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-doc | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-extra | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-kvm | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-kvm | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-extra | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-uki-virt | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | libperf | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | libperf-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | perf | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | perf-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | python3-perf | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | python3-perf-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | rtla | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | rv | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | bpftool | 0 | 0:7.3.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | bpftool-debuginfo | 0 | 0:7.3.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel-matched | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-extra | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-abi-stablelists | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-cross-headers | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel-matched | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-extra | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-uki-virt | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel-matched | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-doc | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-extra | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-kvm | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules-core | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debuginfo | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-devel | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-kvm | 0 | 0:5.14.0-427.24.1.el9_4 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules | 0 | 0:5.14.0-427.24.1.el9_4 |
Related vulnerabilities
- CVE-2024-53197 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix… Also affects bpftool
- CVE-2024-53150 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix… Also affects bpftool
- CVE-2024-2201 A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed… Also affects bpftool
- CVE-2024-53122 In the Linux kernel, the following vulnerability has been resolved: mptcp: cope racing… Also affects bpftool
- CVE-2024-53113 In the Linux kernel, the following vulnerability has been resolved: mm: fix NULL pointer… Also affects bpftool
- CVE-2024-53104 In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip… Also affects bpftool
- CVE-2023-52922 In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in… Also affects bpftool
- CVE-2024-53088 In the Linux kernel, the following vulnerability has been resolved: i40e: fix race… Also affects bpftool