CVE-2024-40907
NoneCVSS
—
EPSS
0.6%
Published
Jul 12, 2024
CISA due date
—
Cloudanix analysis
Schedule a fix
SSVC: Track
A bug in certain Linux network cards can cause the whole computer to crash when handling special network traffic, so updating the operating system fixes it and prevents outages.
- Exploitation
- Local Privilege
- Attacker needs
- Local User
- Complexity
- Moderate
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Use After Free
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Use-after-free in the ionic Linux kernel driver: XDP_TX reuses an RX page and DMA address that ionic_tx_clean() frees without resetting the RX ring buffer entry, allowing subsequent access to the freed page.
Why it matters to the business
Systems using the ionic network driver with XDP enabled can experience sudden kernel panics and reboots, causing denial of service and potential loss of network connectivity or workload availability; the issue affects a wide range of Linux distributions and has been present for an extended period since disclosure.
How an attack unfolds
An attacker sends network traffic that triggers the XDP_TX code path in the ionic driver; the driver transmits an RX page without clearing the ring buffer, ionic_tx_clean frees the page, and later ionic_rx_service dereferences the now-freed memory, resulting in a page fault and kernel panic.
How to fix it
Upgrade the Linux kernel to version 6.9.6 or later, or apply commit 8812aa35f3e930f61074b9c1ecea26f354992c21 (or equivalent stable backport) to the ionic driver source; rebuild and reboot with the patched kernel.
How to confirm the fix worked
Verify the running kernel version is at least 6.9.6; confirm the ionic driver source contains the fix for the RX ring buffer reset after ionic_tx_clean; test XDP_TX workloads to ensure no page-fault oops occurs.
Typical attack path
- Send crafted or high-volume packets that cause the ionic driver to take the XDP_TX action
- RX ring buffer entry retains reference to page that will be freed after TX completion
- ionic_tx_clean frees the page but leaves the RX ring pointer non-NULL
- Subsequent RX processing or softirq dereferences the freed page
- Kernel page fault handler triggers oops and potential system crash
How to detect it
Review kernel logs (dmesg, /var/log/kern.log, journalctl) for ionic-related oops or page-fault messages containing ionic_rx_service, ionic_tx_clean, and references to freed RX pages; correlate with XDP-enabled interfaces and softirq activity.
- BUG: unable to handle page fault for address
- ionic_rx_service
- ionic_tx_clean
- bpf_prog.*balancer_ingress
- Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
What your security team should do
- Immediately identify all hosts running ionic driver with XDP enabled and schedule kernel upgrades to 6.9.6+
- Prioritize patching on production systems that handle untrusted network traffic
- Monitor vendor and distribution advisories for additional stable backports
- Disable XDP on ionic interfaces if patching cannot be performed promptly
The record
In the Linux kernel, the following vulnerability has been resolved: ionic: fix kernel panic in XDP_TX action In the XDP_TX path, ionic driver sends a packet to the TX path with rx page and corresponding dma address. After tx is done, ionic_tx_clean() frees that page. But RX ring buffer isn't reset to NULL. So, it uses a freed page, which causes kernel panic. BUG: unable to handle page fault for address: ffff8881576c110c PGD 773801067 P4D 773801067 PUD 87f086067 PMD 87efca067 PTE 800ffffea893e060 Oops: Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN NOPTI CPU: 1 PID: 25 Comm: ksoftirqd/1 Not tainted 6.9.0+ #11 Hardware name: ASUS System Product Name/PRIME Z690-P D4, BIOS 0603 11/01/2021 RIP: 0010:bpf_prog_f0b8caeac1068a55_balancer_ingress+0x3b/0x44f Code: 00 53 41 55 41 56 41 57 b8 01 00 00 00 48 8b 5f 08 4c 8b 77 00 4c 89 f7 48 83 c7 0e 48 39 d8 RSP: 0018:ffff888104e6fa28 EFLAGS: 00010283 RAX: 0000000000000002 RBX: ffff8881576c1140 RCX: 0000000000000002 RDX: ffffffffc0051f64 RSI: ffffc90002d33048 RDI: ffff8881576c110e RBP: ffff888104e6fa88 R08: 0000000000000000 R09: ffffed1027a04a23 R10: 0000000000000000 R11: 0000000000000000 R12: ffff8881b03a21a8 R13: ffff8881589f800f R14: ffff8881576c1100 R15: 00000001576c1100 FS: 0000000000000000(0000) GS:ffff88881ae00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffff8881576c110c CR3: 0000000767a90000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <TASK> ? __die+0x20/0x70 ? page_fault_oops+0x254/0x790 ? __pfx_page_fault_oops+0x10/0x10 ? __pfx_is_prefetch.constprop.0+0x10/0x10 ? search_bpf_extables+0x165/0x260 ? fixup_exception+0x4a/0x970 ? exc_page_fault+0xcb/0xe0 ? asm_exc_page_fault+0x22/0x30 ? 0xffffffffc0051f64 ? bpf_prog_f0b8caeac1068a55_balancer_ingress+0x3b/0x44f ? do_raw_spin_unlock+0x54/0x220 ionic_rx_service+0x11ab/0x3010 [ionic 9180c3001ab627d82bbc5f3ebe8a0decaf6bb864] ? ionic_tx_clean+0x29b/0xc60 [ionic 9180c3001ab627d82bbc5f3ebe8a0decaf6bb864] ? __pfx_ionic_tx_clean+0x10/0x10 [ionic 9180c3001ab627d82bbc5f3ebe8a0decaf6bb864] ? __pfx_ionic_rx_service+0x10/0x10 [ionic 9180c3001ab627d82bbc5f3ebe8a0decaf6bb864] ? ionic_tx_cq_service+0x25d/0xa00 [ionic 9180c3001ab627d82bbc5f3ebe8a0decaf6bb864] ? __pfx_ionic_rx_service+0x10/0x10 [ionic 9180c3001ab627d82bbc5f3ebe8a0decaf6bb864] ionic_cq_service+0x69/0x150 [ionic 9180c3001ab627d82bbc5f3ebe8a0decaf6bb864] ionic_txrx_napi+0x11a/0x540 [ionic 9180c3001ab627d82bbc5f3ebe8a0decaf6bb864] __napi_poll.constprop.0+0xa0/0x440 net_rx_action+0x7e7/0xc30 ? __pfx_net_rx_action+0x10/0x10
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:13 | linux | 0 | 6.9.7-1 |
| Linux | Kernel | 6.9.0 | 6.9.6 |
| Red Hat:enterprise_linux:9::appstream | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-doc | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-uki-virt-addons | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | libperf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | libperf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | python3-perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | python3-perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | rtla | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | rv | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-doc | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-libs | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-libs-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-uki-virt-addons | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | libperf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | libperf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | python3-perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | python3-perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | rtla | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | rv | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-503.11.1.el9_5 |
Related vulnerabilities
- CVE-2025-39682 In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of… Also affects linux
- CVE-2025-38562 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2023-3867 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of… Also affects linux
- CVE-2023-3865 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix… Also affects linux
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects linux
- CVE-2025-37924 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix… Also affects linux
- CVE-2025-22037 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2025-21813 In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix… Also affects linux