CVE-2022-48796
High · 7.8CVSS
7.8
EPSS
0.3%
Published
Jul 16, 2024
CISA due date
—
Cloudanix analysis
A bug in how the Linux kernel initializes certain hardware devices can let someone already on the system crash the machine or potentially take full control.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Moderate
- Impact
- Full Compromise
- Component
- OS kernel
- Class
- Use After Free
- Remediation
- Patch
- Effort
- Medium
- Patch risk
- Low
What it actually does
Race condition in Linux kernel IOMMU probe allows use-after-free on dev->iommu->fwspec when device probe fails and dev_iommu_free runs concurrently with deferred_probe_work_func accessing the freed structure.
Why it matters to the business
Local attackers on affected Linux systems can trigger kernel crashes, memory corruption, or potential privilege escalation, leading to system instability, downtime, and risk of full host compromise in environments relying on IOMMU for device virtualization or DMA protection.
How an attack unfolds
An attacker with local access triggers repeated device probe failures (for example via malformed platform devices or driver errors) while the deferred probe workqueue runs in parallel; this races with dev_iommu_free, allowing the attacker to access or corrupt the already-freed IOMMU fwspec pointer and achieve memory corruption or code execution.
How to fix it
Upgrade the Linux kernel to a version containing commit cb86e511e78e796de6947b8f3acca1b7c76fb2ff or later; rebuild and reboot all affected hosts; where immediate patching is impossible, restrict untrusted local access and monitor for IOMMU-related probe failures.
How to confirm the fix worked
Verify the running kernel contains commit cb86e511e78e796de6947b8f3acca1b7c76fb2ff via git log or uname; attempt to reproduce the original KASAN report under load with concurrent probe failures; confirm dev->iommu is set to NULL before kfree in dev_iommu_free.
Typical attack path
- Obtain local user or unprivileged process access on a vulnerable Linux kernel
- Trigger IOMMU device probe failures that invoke dev_iommu_free
- Force concurrent execution of deferred_probe_work_func via device enumeration or driver load
- Read or write through the dangling dev->iommu pointer to corrupt kernel memory
- Escalate to ring-0 code execution or cause denial of service
How to detect it
Review kernel logs (dmesg, /var/log/kern.log) for KASAN use-after-free reports mentioning of_iommu_configure, deferred_probe_work_func, or dev_iommu_free; look for repeated platform device probe failures followed by worker thread crashes; monitor for unusual IOMMU or DMA configuration errors during boot or hotplug events.
What your security team should do
- Prioritize kernel upgrades on all systems within the CISA-style remediation window if any downstream dependencies exist
- Apply the fixed commit and test IOMMU-enabled platforms (especially ARM SMMU) under probe-failure scenarios
- Harden local access controls and reduce attack surface for device driver loading until patched
- Add kernel build and boot-time checks to ensure the fix commit is present
The record
In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential use-after-free during probe Kasan has reported the following use after free on dev->iommu. when a device probe fails and it is in process of freeing dev->iommu in dev_iommu_free function, a deferred_probe_work_func runs in parallel and tries to access dev->iommu->fwspec in of_iommu_configure path thus causing use after free. BUG: KASAN: use-after-free in of_iommu_configure+0xb4/0x4a4 Read of size 8 at addr ffffff87a2f1acb8 by task kworker/u16:2/153 Workqueue: events_unbound deferred_probe_work_func Call trace: dump_backtrace+0x0/0x33c show_stack+0x18/0x24 dump_stack_lvl+0x16c/0x1e0 print_address_description+0x84/0x39c __kasan_report+0x184/0x308 kasan_report+0x50/0x78 __asan_load8+0xc0/0xc4 of_iommu_configure+0xb4/0x4a4 of_dma_configure_id+0x2fc/0x4d4 platform_dma_configure+0x40/0x5c really_probe+0x1b4/0xb74 driver_probe_device+0x11c/0x228 __device_attach_driver+0x14c/0x304 bus_for_each_drv+0x124/0x1b0 __device_attach+0x25c/0x334 device_initial_probe+0x24/0x34 bus_probe_device+0x78/0x134 deferred_probe_work_func+0x130/0x1a8 process_one_work+0x4c8/0x970 worker_thread+0x5c8/0xaec kthread+0x1f8/0x220 ret_from_fork+0x10/0x18 Allocated by task 1: ____kasan_kmalloc+0xd4/0x114 __kasan_kmalloc+0x10/0x1c kmem_cache_alloc_trace+0xe4/0x3d4 __iommu_probe_device+0x90/0x394 probe_iommu_group+0x70/0x9c bus_for_each_dev+0x11c/0x19c bus_iommu_probe+0xb8/0x7d4 bus_set_iommu+0xcc/0x13c arm_smmu_bus_init+0x44/0x130 [arm_smmu] arm_smmu_device_probe+0xb88/0xc54 [arm_smmu] platform_drv_probe+0xe4/0x13c really_probe+0x2c8/0xb74 driver_probe_device+0x11c/0x228 device_driver_attach+0xf0/0x16c __driver_attach+0x80/0x320 bus_for_each_dev+0x11c/0x19c driver_attach+0x38/0x48 bus_add_driver+0x1dc/0x3a4 driver_register+0x18c/0x244 __platform_driver_register+0x88/0x9c init_module+0x64/0xff4 [arm_smmu] do_one_initcall+0x17c/0x2f0 do_init_module+0xe8/0x378 load_module+0x3f80/0x4a40 __se_sys_finit_module+0x1a0/0x1e4 __arm64_sys_finit_module+0x44/0x58 el0_svc_common+0x100/0x264 do_el0_svc+0x38/0xa4 el0_svc+0x20/0x30 el0_sync_handler+0x68/0xac el0_sync+0x160/0x180 Freed by task 1: kasan_set_track+0x4c/0x84 kasan_set_free_info+0x28/0x4c ____kasan_slab_free+0x120/0x15c __kasan_slab_free+0x18/0x28 slab_free_freelist_hook+0x204/0x2fc kfree+0xfc/0x3a4 __iommu_probe_device+0x284/0x394 probe_iommu_group+0x70/0x9c bus_for_each_dev+0x11c/0x19c bus_iommu_probe+0xb8/0x7d4 bus_set_iommu+0xcc/0x13c arm_smmu_bus_init+0x44/0x130 [arm_smmu] arm_smmu_device_probe+0xb88/0xc54 [arm_smmu] platform_drv_probe+0xe4/0x13c really_probe+0x2c8/0xb74 driver_probe_device+0x11c/0x228 device_driver_attach+0xf0/0x16c __driver_attach+0x80/0x320 bus_for_each_dev+0x11c/0x19c driver_attach+0x38/0x48 bus_add_driver+0x1dc/0x3a4 driver_register+0x18c/0x244 __platform_driver_register+0x88/0x9c init_module+0x64/0xff4 [arm_smmu] do_one_initcall+0x17c/0x2f0 do_init_module+0xe8/0x378 load_module+0x3f80/0x4a40 __se_sys_finit_module+0x1a0/0x1e4 __arm64_sys_finit_module+0x44/0x58 el0_svc_common+0x100/0x264 do_el0_svc+0x38/0xa4 el0_svc+0x20/0x30 el0_sync_handler+0x68/0xac el0_sync+0x160/0x180 Fix this by setting dev->iommu to NULL first and then freeing dev_iommu structure in dev_iommu_free function.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | linux | 0 | 5.10.103-1 |
| Debian:12 | linux | 0 | 5.16.10-1 |
| Debian:13 | linux | 0 | 5.16.10-1 |
| Linux | Kernel | 5.3.0 | 5.10.101 |
| Red Hat:rhel_aus:8.6::baseos | bpftool | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | bpftool-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-abi-stablelists | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-core | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-debug | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-debug-core | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-debug-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-debug-devel | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-debug-modules | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-debug-modules-extra | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-devel | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-modules | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-modules-extra | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-tools | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-tools-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | kernel-tools-libs | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | perf | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | perf-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | python3-perf | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_aus:8.6::baseos | python3-perf-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | bpftool | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | bpftool-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-abi-stablelists | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-core | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-debug | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-debug-core | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-debug-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-debug-devel | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-debug-modules | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-debug-modules-extra | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-devel | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-modules | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-modules-extra | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-tools | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-tools-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-tools-libs | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-zfcpdump | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-zfcpdump-core | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-zfcpdump-devel | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-zfcpdump-modules | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | perf | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | perf-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | python3-perf | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:8.6::baseos | python3-perf-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_e4s:9.0::appstream | bpftool | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | bpftool-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-core | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-debug | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-debug-core | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-debug-devel | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-debug-modules | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-devel | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-devel-matched | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-doc | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-headers | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-modules | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-modules-extra | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-tools | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-tools-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-tools-libs | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-zfcpdump | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-zfcpdump-core | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-zfcpdump-devel | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-zfcpdump-modules | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | perf | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | perf-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | python3-perf | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::appstream | python3-perf-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | bpftool | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | bpftool-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-abi-stablelists | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-core | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-debug | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-debug-core | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-debug-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-debug-devel | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-debug-devel-matched | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-debug-modules | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-debug-modules-extra | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-devel | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-devel-matched | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-doc | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-headers | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-modules | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-modules-extra | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-tools | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-tools-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-tools-libs | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-zfcpdump | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-zfcpdump-core | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-zfcpdump-devel | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-zfcpdump-modules | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | perf | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | perf-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | python3-perf | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::baseos | python3-perf-debuginfo | 0 | 0:5.14.0-70.121.1.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-core | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-debug | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-debug-core | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-debug-devel | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-debug-kvm | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-debug-modules | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-debuginfo | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-debuginfo-common-x86_64 | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-devel | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-kvm | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-modules | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::nfv | kernel-rt-modules-extra | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-core | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-debug | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-debug-core | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-debug-devel | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-debug-kvm | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-debug-modules | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-debuginfo | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-debuginfo-common-x86_64 | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-devel | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-kvm | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-modules | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_e4s:9.0::realtime | kernel-rt-modules-extra | 0 | 0:5.14.0-70.121.1.rt21.193.el9_0 |
| Red Hat:rhel_tus:8.6::baseos | bpftool | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | bpftool-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-abi-stablelists | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-core | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-debug | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-debug-core | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-debug-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-debug-devel | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-debug-modules | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-debug-modules-extra | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-devel | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-modules | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-modules-extra | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-tools | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-tools-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | kernel-tools-libs | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | perf | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | perf-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | python3-perf | 0 | 0:4.18.0-372.121.1.el8_6 |
| Red Hat:rhel_tus:8.6::baseos | python3-perf-debuginfo | 0 | 0:4.18.0-372.121.1.el8_6 |
| SUSE:Linux Enterprise High Availability Extension 15 SP4 | kernel-default | 0 | 5.14.21-150400.24.128.1 |
| SUSE:Linux Enterprise High Availability Extension 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.73.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-64kb | 0 | 5.14.21-150400.24.128.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-default | 0 | 5.14.21-150400.24.128.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-default-base | 0 | 5.14.21-150400.24.128.1.150400.24.62.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-docs | 0 | 5.14.21-150400.24.128.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-obs-build | 0 | 5.14.21-150400.24.128.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-source | 0 | 5.14.21-150400.24.128.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-syms | 0 | 5.14.21-150400.24.128.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-64kb | 0 | 5.14.21-150400.24.128.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default | 0 | 5.14.21-150400.24.128.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default-base | 0 | 5.14.21-150400.24.128.1.150400.24.62.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-docs | 0 | 5.14.21-150400.24.128.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-obs-build | 0 | 5.14.21-150400.24.128.1 |
Related vulnerabilities
- CVE-2025-38562 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects linux
- CVE-2025-22037 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2025-21760 In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU… Also affects linux
- CVE-2025-21758 In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU… Also affects linux
- CVE-2025-21664 In the Linux kernel, the following vulnerability has been resolved: dm thin: make… Also affects linux
- CVE-2024-57946 In the Linux kernel, the following vulnerability has been resolved: virtio-blk: don't… Also affects linux
- CVE-2024-57945 In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the… Also affects linux