CVE-2024-35852
NoneCVSS
—
EPSS
0.3%
Published
May 17, 2024
CISA due date
—
Cloudanix analysis
Schedule a fix
SSVC: Track
A bug in Linux kernel code for certain network switches can slowly leak memory until the system slows down or stops working.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Theoretical
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Memory leak of objagg hints allocated during ACL ERP rehash that are never freed when the pending delayed work is canceled during spectrum_acl_tcam region dismantle.
Why it matters to the business
Gradual kernel memory exhaustion on systems using Mellanox Spectrum switches can lead to performance degradation, reduced stability, or eventual system crashes in networking workloads.
How an attack unfolds
An attacker triggers repeated ACL region creation and teardown operations that schedule rehash work; if the work remains pending with associated hints when the region is dismantled, the hints are leaked, allowing resource exhaustion over time.
How to fix it
Upgrade the Linux kernel to a version containing commit 51cefc9da400b953fee749c9e5d26cd4a2b5d758 or later stable releases that include the fix for freeing hints on canceled pending work.
How to confirm the fix worked
Confirm the running kernel contains the referenced commit or later; monitor /proc/slabinfo or kmemleak reports for objagg_hints objects during ACL operations.
Typical attack path
- Gain ability to manipulate ACL regions or trigger rehash conditions in mlxsw spectrum driver
- Cause repeated scheduling and cancellation of rehash delayed work while hints are allocated
- Accumulate unreferenced kernel memory objects until exhaustion or crash
How to detect it
Inspect kernel logs for repeated objagg_hints_get allocations without corresponding frees during ACL region teardown; use kmemleak or slab tracing to identify unreferenced 256-byte objects from mlxsw_sp_acl_erp_rehash_hints_get.
What your security team should do
- Prioritize kernel updates on all systems using mlxsw spectrum_acl_tcam
- Review and apply the exact fixed commit across affected stable trees
- Monitor memory usage trends on switch management planes for unexplained growth
The record
In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work The rehash delayed work is rescheduled with a delay if the number of credits at end of the work is not negative as supposedly it means that the migration ended. Otherwise, it is rescheduled immediately. After "mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash" the above is no longer accurate as a non-negative number of credits is no longer indicative of the migration being done. It can also happen if the work encountered an error in which case the migration will resume the next time the work is scheduled. The significance of the above is that it is possible for the work to be pending and associated with hints that were allocated when the migration started. This leads to the hints being leaked [1] when the work is canceled while pending as part of ACL region dismantle. Fix by freeing the hints if hints are associated with a work that was canceled while pending. Blame the original commit since the reliance on not having a pending work associated with hints is fragile. [1] unreferenced object 0xffff88810e7c3000 (size 256): comm "kworker/0:16", pid 176, jiffies 4295460353 hex dump (first 32 bytes): 00 30 95 11 81 88 ff ff 61 00 00 00 00 00 00 80 .0......a....... 00 00 61 00 40 00 00 00 00 00 00 00 04 00 00 00 ..a.@........... backtrace (crc 2544ddb9): [<00000000cf8cfab3>] kmalloc_trace+0x23f/0x2a0 [<000000004d9a1ad9>] objagg_hints_get+0x42/0x390 [<000000000b143cf3>] mlxsw_sp_acl_erp_rehash_hints_get+0xca/0x400 [<0000000059bdb60a>] mlxsw_sp_acl_tcam_vregion_rehash_work+0x868/0x1160 [<00000000e81fd734>] process_one_work+0x59c/0xf20 [<00000000ceee9e81>] worker_thread+0x799/0x12c0 [<00000000bda6fe39>] kthread+0x246/0x300 [<0000000070056d23>] ret_from_fork+0x34/0x70 [<00000000dea2b93e>] ret_from_fork_asm+0x1a/0x30
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | kernel-rt | 0 | 4.18.0-553.8.1.rt7.349.el8_10 |
| AlmaLinux:8 | kernel-rt-core | 0 | 4.18.0-553.8.1.rt7.349.el8_10 |
| AlmaLinux:8 | kernel-rt-debug | 0 | 4.18.0-553.8.1.rt7.349.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-core | 0 | 4.18.0-553.8.1.rt7.349.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-devel | 0 | 4.18.0-553.8.1.rt7.349.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-kvm | 0 | 4.18.0-553.8.1.rt7.349.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-modules | 0 | 4.18.0-553.8.1.rt7.349.el8_10 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 0 | 4.18.0-553.8.1.rt7.349.el8_10 |
| AlmaLinux:8 | kernel-rt-devel | 0 | 4.18.0-553.8.1.rt7.349.el8_10 |
| AlmaLinux:8 | kernel-rt-kvm | 0 | 4.18.0-553.8.1.rt7.349.el8_10 |
| AlmaLinux:8 | kernel-rt-modules | 0 | 4.18.0-553.8.1.rt7.349.el8_10 |
| AlmaLinux:8 | kernel-rt-modules-extra | 0 | 4.18.0-553.8.1.rt7.349.el8_10 |
| AlmaLinux:9 | bpftool | 0 | 7.3.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-devel | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-devel-matched | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-debug-modules-extra | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-devel | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-devel-matched | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-64k-modules-extra | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-abi-stablelists | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-cross-headers | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-debug | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-debug-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-debug-devel | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-debug-devel-matched | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-debug-modules-extra | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-debug-uki-virt | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-devel | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-devel-matched | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-doc | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-headers | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-modules | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-modules-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-modules-extra | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-rt | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-rt-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-devel | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-rt-debug-modules-extra | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-rt-devel | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-rt-modules-extra | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-tools | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-tools-libs | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-tools-libs-devel | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-uki-virt | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-devel | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-devel-matched | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules-core | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | kernel-zfcpdump-modules-extra | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | libperf | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | perf | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | python3-perf | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | rtla | 0 | 5.14.0-427.31.1.el9_4 |
| AlmaLinux:9 | rv | 0 | 5.14.0-427.31.1.el9_4 |
| Debian:10 | linux-5.10 | 0 | 5.10.216-1~deb10u1 |
| Debian:11 | linux | 0 | 5.10.216-1 |
| Debian:12 | linux | 0 | 6.1.90-1 |
| Debian:13 | linux | 0 | 6.8.9-1 |
| Linux | Kernel | 5.1.0 | 5.4.275 |
| Mageia:9 | dwarves | 0 | 1.27-1.mga9 |
| Mageia:9 | kernel | 0 | 6.6.37-1.mga9 |
| Mageia:9 | kernel-linus | 0 | 6.6.37-1.mga9 |
| Mageia:9 | kmod-virtualbox | 0 | 7.0.18-50.mga9 |
| Mageia:9 | kmod-xtables-addons | 0 | 3.24-59.mga9 |
| Red Hat:enterprise_linux:8::baseos | bpftool | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | bpftool-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-abi-stablelists | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-core | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-cross-headers | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-core | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-devel | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debug-modules-extra | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-devel | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-doc | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-headers | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-modules-extra | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-tools-libs-devel | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-core | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-devel | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | perf | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | perf-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | python3-perf | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::baseos | python3-perf-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | bpftool | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | bpftool-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-abi-stablelists | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-core | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-cross-headers | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-core | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-devel | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debug-modules-extra | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-aarch64 | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-ppc64le | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-s390x | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-devel | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-doc | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-headers | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-modules | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-modules-extra | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-tools-libs-devel | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-core | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-devel | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | kernel-zfcpdump-modules-extra | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | perf | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | perf-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | python3-perf | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::crb | python3-perf-debuginfo | 0 | 0:4.18.0-553.8.1.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-core | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-core | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-devel | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-kvm | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-devel | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-kvm | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::nfv | kernel-rt-modules-extra | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-core | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-core | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-debuginfo | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-devel | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-kvm | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debug-modules-extra | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debuginfo | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-debuginfo-common-x86_64 | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-devel | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-kvm | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-modules | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:8::realtime | kernel-rt-modules-extra | 0 | 0:4.18.0-553.8.1.rt7.349.el8_10 |
| Red Hat:enterprise_linux:9::appstream | bpftool | 0 | 0:7.3.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | bpftool-debuginfo | 0 | 0:7.3.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel | 0 | 0:5.14.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k | 0 | 0:5.14.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-core | 0 | 0:5.14.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug | 0 | 0:5.14.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-core | 0 | 0:5.14.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel | 0 | 0:5.14.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules | 0 | 0:5.14.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-core | 0 | 0:5.14.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-427.31.1.el9_4 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debuginfo | 0 | 0:5.14.0-427.31.1.el9_4 |
Related vulnerabilities
- CVE-2025-68301 In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix… Also affects kernel-rt
- CVE-2025-68285 In the Linux kernel, the following vulnerability has been resolved: libceph: fix… Also affects kernel-rt
- CVE-2025-40277 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate… Also affects kernel-rt
- CVE-2025-40248 In the Linux kernel, the following vulnerability has been resolved: vsock: Ignore… Also affects kernel-rt
- CVE-2025-40240 In the Linux kernel, the following vulnerability has been resolved: sctp: avoid NULL… Also affects kernel-rt
- CVE-2025-40154 In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel… Also affects kernel-rt
- CVE-2025-40096 In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix… Also affects kernel-rt
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects kernel-rt