CVE-2024-36028
NoneCVSS
—
EPSS
0.2%
Published
May 30, 2024
CISA due date
—
Cloudanix analysis
A flaw in how the Linux kernel manages large memory pages during error handling can cause the system to crash unexpectedly when certain memory problems occur.
- Exploitation
- Local Privilege
- Attacker needs
- Low Privilege
- Complexity
- Moderate
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Race Condition
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Race condition in mm/hugetlb folio handling where _deferred_list and _hugetlb_subpool fields are unioned, causing incorrect spinlock acquisition during dissolve_free_huge_page and free_huge_folio when memory_failure is triggered on huge pages, resulting in lockdep warnings and potential kernel panic.
Why it matters to the business
Unexpected system crashes or instability on Linux systems when memory errors occur on huge pages, potentially disrupting workloads that rely on hugetlbfs and requiring reboots or failover, with higher urgency for environments running unpatched kernels from mid-2024 onward.
How an attack unfolds
An attacker with local access triggers memory failure handling on a huge page by writing to sysfs interfaces or injecting hardware memory errors, causing the race in dissolve_free_huge_page that leads to invalid lock state and system panic under panic_on_warn configurations.
How to fix it
Update the Linux kernel to the fixed commit 2dde18cd1d8fac735875f2e4987f11817cc0bc2c or later equivalent backport in your distribution; rebuild and reboot into the patched kernel, ensuring hugetlb and memory failure paths are exercised in testing.
How to confirm the fix worked
Confirm kernel source includes the fix in mm/hugetlb.c around dissolve_free_huge_page and __update_and_free_hugetlb_folio; run memory failure injection tests with DEBUG_LOCKS enabled and verify absence of lockdep warnings.
Typical attack path
- Obtain local user access on a Linux system using affected kernel versions
- Trigger memory failure via hard_offline_page_store or equivalent interfaces
- Target hugetlb-backed pages to invoke dissolve_free_huge_page
- Exploit the folio field union to induce lockdep violation
- Cause kernel warning and subsequent panic if enabled
How to detect it
Review kernel logs for DEBUG_LOCKS_WARN_ON messages involving __lock_acquire, hugepage_subpool_put_pages, or dissolve_free_huge_page during memory_failure events; correlate with writes to hard_offline_page_store or mce_inject usage.
What your security team should do
- Prioritize patching production kernels within standard maintenance windows given the low EPSS but potential for local DoS
- Disable panic_on_warn in non-debug environments to reduce blast radius until patched
- Monitor for kernel updates from distributions and apply within 30 days for high-availability systems
- Test hugetlb workloads post-patch to validate stability under memory error conditions
The record
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() When I did memory failure tests recently, below warning occurs: DEBUG_LOCKS_WARN_ON(1) WARNING: CPU: 8 PID: 1011 at kernel/locking/lockdep.c:232 __lock_acquire+0xccb/0x1ca0 Modules linked in: mce_inject hwpoison_inject CPU: 8 PID: 1011 Comm: bash Kdump: loaded Not tainted 6.9.0-rc3-next-20240410-00012-gdb69f219f4be #3 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 RIP: 0010:__lock_acquire+0xccb/0x1ca0 RSP: 0018:ffffa7a1c7fe3bd0 EFLAGS: 00000082 RAX: 0000000000000000 RBX: eb851eb853975fcf RCX: ffffa1ce5fc1c9c8 RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffffa1ce5fc1c9c0 RBP: ffffa1c6865d3280 R08: ffffffffb0f570a8 R09: 0000000000009ffb R10: 0000000000000286 R11: ffffffffb0f2ad50 R12: ffffa1c6865d3d10 R13: ffffa1c6865d3c70 R14: 0000000000000000 R15: 0000000000000004 FS: 00007ff9f32aa740(0000) GS:ffffa1ce5fc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff9f3134ba0 CR3: 00000008484e4000 CR4: 00000000000006f0 Call Trace: <TASK> lock_acquire+0xbe/0x2d0 _raw_spin_lock_irqsave+0x3a/0x60 hugepage_subpool_put_pages.part.0+0xe/0xc0 free_huge_folio+0x253/0x3f0 dissolve_free_huge_page+0x147/0x210 __page_handle_poison+0x9/0x70 memory_failure+0x4e6/0x8c0 hard_offline_page_store+0x55/0xa0 kernfs_fop_write_iter+0x12c/0x1d0 vfs_write+0x380/0x540 ksys_write+0x64/0xe0 do_syscall_64+0xbc/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff9f3114887 RSP: 002b:00007ffecbacb458 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007ff9f3114887 RDX: 000000000000000c RSI: 0000564494164e10 RDI: 0000000000000001 RBP: 0000564494164e10 R08: 00007ff9f31d1460 R09: 000000007fffffff R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c R13: 00007ff9f321b780 R14: 00007ff9f3217600 R15: 00007ff9f3216a00 </TASK> Kernel panic - not syncing: kernel: panic_on_warn set ... CPU: 8 PID: 1011 Comm: bash Kdump: loaded Not tainted 6.9.0-rc3-next-20240410-00012-gdb69f219f4be #3 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 Call Trace: <TASK> panic+0x326/0x350 check_panic_on_warn+0x4f/0x50 __warn+0x98/0x190 report_bug+0x18e/0x1a0 handle_bug+0x3d/0x70 exc_invalid_op+0x18/0x70 asm_exc_invalid_op+0x1a/0x20 RIP: 0010:__lock_acquire+0xccb/0x1ca0 RSP: 0018:ffffa7a1c7fe3bd0 EFLAGS: 00000082 RAX: 0000000000000000 RBX: eb851eb853975fcf RCX: ffffa1ce5fc1c9c8 RDX: 00000000ffffffd8 RSI: 0000000000000027 RDI: ffffa1ce5fc1c9c0 RBP: ffffa1c6865d3280 R08: ffffffffb0f570a8 R09: 0000000000009ffb R10: 0000000000000286 R11: ffffffffb0f2ad50 R12: ffffa1c6865d3d10 R13: ffffa1c6865d3c70 R14: 0000000000000000 R15: 0000000000000004 lock_acquire+0xbe/0x2d0 _raw_spin_lock_irqsave+0x3a/0x60 hugepage_subpool_put_pages.part.0+0xe/0xc0 free_huge_folio+0x253/0x3f0 dissolve_free_huge_page+0x147/0x210 __page_handle_poison+0x9/0x70 memory_failure+0x4e6/0x8c0 hard_offline_page_store+0x55/0xa0 kernfs_fop_write_iter+0x12c/0x1d0 vfs_write+0x380/0x540 ksys_write+0x64/0xe0 do_syscall_64+0xbc/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7ff9f3114887 RSP: 002b:00007ffecbacb458 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00007ff9f3114887 RDX: 000000000000000c RSI: 0000564494164e10 RDI: 0000000000000001 RBP: 0000564494164e10 R08: 00007ff9f31d1460 R09: 000000007fffffff R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c R13: 00007ff9f321b780 R14: 00007ff9f3217600 R15: 00007ff9f3216a00 </TASK> After git bisecting and digging into the code, I believe the root cause is that _deferred_list field of folio is unioned with _hugetlb_subpool field. In __update_and_free_hugetlb_folio(), folio->_deferred_ ---truncated---
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:12 | linux | 0 | 6.1.94-1 |
| Debian:13 | linux | 0 | 6.8.9-1 |
| Debian:14 | linux | 0 | 6.8.9-1 |
| Linux | Kernel | 0 | 6.1.91 |
| Mageia:9 | dwarves | 0 | 1.27-1.mga9 |
| Mageia:9 | kernel | 0 | 6.6.37-1.mga9 |
| Mageia:9 | kernel-linus | 0 | 6.6.37-1.mga9 |
| Mageia:9 | kmod-virtualbox | 0 | 7.0.18-50.mga9 |
| Mageia:9 | kmod-xtables-addons | 0 | 3.24-59.mga9 |
| Red Hat:enterprise_linux:9::appstream | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-doc | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-uki-virt-addons | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | libperf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | libperf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | python3-perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | python3-perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | rtla | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | rv | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-doc | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-libs | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-libs-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-uki-virt-addons | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | libperf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | libperf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | python3-perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | python3-perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | rtla | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | rv | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
Related vulnerabilities
- CVE-2025-39682 In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of… Also affects linux
- CVE-2025-38562 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2023-3867 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of… Also affects linux
- CVE-2023-3865 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix… Also affects linux
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects linux
- CVE-2025-37924 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix… Also affects linux
- CVE-2025-22037 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2025-21760 In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU… Also affects linux