CVE-2024-26746
NoneCVSS
—
EPSS
0.2%
Published
Apr 4, 2024
CISA due date
—
Cloudanix analysis
A problem in the Linux kernel used by many servers and devices could let programs see parts of the computer's protected memory or cause the system to crash when certain hardware features are active.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Moderate
- Impact
- Data Exposure
- Component
- OS kernel
- Class
- Information Disclosure
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
The idxd dmaengine driver creates an event log cache with kmem_cache_create() instead of kmem_cache_create_usercopy(), allowing hardened usercopy checks to detect and abort an attempt to copy kernel memory (completion records) to user space, which would otherwise expose sensitive kernel contents.
Why it matters to the business
Systems running affected Linux kernels on Debian or Ubuntu may experience kernel panics or, in the absence of hardened checks, unintended leakage of kernel memory to user processes, potentially impacting availability of systems using Intel DSA hardware and increasing risk of information exposure on high-prevalence kernel deployments.
How an attack unfolds
An attacker with the ability to trigger idxd event log fault handling (via workloads using the idxd driver) causes the kernel to attempt copying completion records from the improperly created cache to user space; without the fix this can result in memory exposure or a crash under hardened configurations.
How to fix it
Upgrade to fixed kernel versions listed for each distribution (examples: Debian 5.10.28-1, Ubuntu 20.04 linux 5.4.0-9.12, linux-aws 5.4.0-1005.5, linux-azure 5.4.0-1006.6 and equivalent updates for other listed packages). Reboot after installing the updated packages and verify the idxd module uses the corrected cache creation path.
How to confirm the fix worked
Confirm the running kernel version matches or exceeds the fixed version for the distribution; inspect kernel source or loaded module symbols for use of kmem_cache_create_usercopy in idxd initialization; test with CONFIG_HARDENED_USERCOPY enabled that no usercopy_abort occurs during idxd event log operations.
Typical attack path
- Gain local access or execute workloads that exercise the idxd dmaengine event log path.
- Trigger idxd_evl_fault_work which calls idxd_copy_cr.
- Cause the kernel to perform a usercopy from the SLUB object created without usercopy support.
- Either observe leaked kernel memory or induce a BUG/panic under CONFIG_HARDENED_USERCOPY.
How to detect it
Review kernel logs for messages containing usercopy_abort, kernel BUG at mm/usercopy.c, or idxd_evl_fault_work stack traces; search system audit or dmesg records around the time of any idxd-related workqueue activity for SLUB object references to 'dsa0'.
What your security team should do
- Prioritize patching all affected Debian and Ubuntu systems to the listed fixed kernel versions within standard change windows.
- Identify workloads or hardware using the idxd driver and schedule reboots after package installation.
- Monitor for kernel oops or BUG reports referencing usercopy_abort or idxd_evl_fault_work until patches are deployed.
The record
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Ensure safe user copy of completion record If CONFIG_HARDENED_USERCOPY is enabled, copying completion record from event log cache to user triggers a kernel bug. [ 1987.159822] usercopy: Kernel memory exposure attempt detected from SLUB object 'dsa0' (offset 74, size 31)! [ 1987.170845] ------------[ cut here ]------------ [ 1987.176086] kernel BUG at mm/usercopy.c:102! [ 1987.180946] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [ 1987.186866] CPU: 17 PID: 528 Comm: kworker/17:1 Not tainted 6.8.0-rc2+ #5 [ 1987.194537] Hardware name: Intel Corporation AvenueCity/AvenueCity, BIOS BHSDCRB1.86B.2492.D03.2307181620 07/18/2023 [ 1987.206405] Workqueue: wq0.0 idxd_evl_fault_work [idxd] [ 1987.212338] RIP: 0010:usercopy_abort+0x72/0x90 [ 1987.217381] Code: 58 65 9c 50 48 c7 c2 17 85 61 9c 57 48 c7 c7 98 fd 6b 9c 48 0f 44 d6 48 c7 c6 b3 08 62 9c 4c 89 d1 49 0f 44 f3 e8 1e 2e d5 ff <0f> 0b 49 c7 c1 9e 42 61 9c 4c 89 cf 4d 89 c8 eb a9 66 66 2e 0f 1f [ 1987.238505] RSP: 0018:ff62f5cf20607d60 EFLAGS: 00010246 [ 1987.244423] RAX: 000000000000005f RBX: 000000000000001f RCX: 0000000000000000 [ 1987.252480] RDX: 0000000000000000 RSI: ffffffff9c61429e RDI: 00000000ffffffff [ 1987.260538] RBP: ff62f5cf20607d78 R08: ff2a6a89ef3fffe8 R09: 00000000fffeffff [ 1987.268595] R10: ff2a6a89eed00000 R11: 0000000000000003 R12: ff2a66934849c89a [ 1987.276652] R13: 0000000000000001 R14: ff2a66934849c8b9 R15: ff2a66934849c899 [ 1987.284710] FS: 0000000000000000(0000) GS:ff2a66b22fe40000(0000) knlGS:0000000000000000 [ 1987.293850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1987.300355] CR2: 00007fe291a37000 CR3: 000000010fbd4005 CR4: 0000000000f71ef0 [ 1987.308413] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1987.316470] DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 [ 1987.324527] PKRU: 55555554 [ 1987.327622] Call Trace: [ 1987.330424] <TASK> [ 1987.332826] ? show_regs+0x6e/0x80 [ 1987.336703] ? die+0x3c/0xa0 [ 1987.339988] ? do_trap+0xd4/0xf0 [ 1987.343662] ? do_error_trap+0x75/0xa0 [ 1987.347922] ? usercopy_abort+0x72/0x90 [ 1987.352277] ? exc_invalid_op+0x57/0x80 [ 1987.356634] ? usercopy_abort+0x72/0x90 [ 1987.360988] ? asm_exc_invalid_op+0x1f/0x30 [ 1987.365734] ? usercopy_abort+0x72/0x90 [ 1987.370088] __check_heap_object+0xb7/0xd0 [ 1987.374739] __check_object_size+0x175/0x2d0 [ 1987.379588] idxd_copy_cr+0xa9/0x130 [idxd] [ 1987.384341] idxd_evl_fault_work+0x127/0x390 [idxd] [ 1987.389878] process_one_work+0x13e/0x300 [ 1987.394435] ? __pfx_worker_thread+0x10/0x10 [ 1987.399284] worker_thread+0x2f7/0x420 [ 1987.403544] ? _raw_spin_unlock_irqrestore+0x2b/0x50 [ 1987.409171] ? __pfx_worker_thread+0x10/0x10 [ 1987.414019] kthread+0x107/0x140 [ 1987.417693] ? __pfx_kthread+0x10/0x10 [ 1987.421954] ret_from_fork+0x3d/0x60 [ 1987.426019] ? __pfx_kthread+0x10/0x10 [ 1987.430281] ret_from_fork_asm+0x1b/0x30 [ 1987.434744] </TASK> The issue arises because event log cache is created using kmem_cache_create() which is not suitable for user copy. Fix the issue by creating event log cache with kmem_cache_create_usercopy(), ensuring safe user copy.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:13 | linux | 0 | 6.7.9-1 |
| Linux | Kernel | 6.4.0 | 6.6.21 |
| Red Hat:enterprise_linux:9::appstream | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-doc | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-uki-virt-addons | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | libperf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | libperf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | python3-perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | python3-perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | rtla | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | rv | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-doc | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-libs | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-libs-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-uki-virt-addons | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | libperf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | libperf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | python3-perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | python3-perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | rtla | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | rv | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-503.11.1.el9_5 |
Related vulnerabilities
- CVE-2025-39682 In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of… Also affects linux
- CVE-2025-38562 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2023-3867 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of… Also affects linux
- CVE-2023-3865 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix… Also affects linux
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects linux
- CVE-2025-37924 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix… Also affects linux
- CVE-2025-22037 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2025-21813 In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix… Also affects linux