CVE-2024-40923
NoneCVSS
—
EPSS
0.8%
Published
Jul 12, 2024
CISA due date
—
Cloudanix analysis
A bug in the VMware network driver inside Linux can cause virtual machines to crash when memory runs low during startup of the network card.
- Exploitation
- Other
- Attacker needs
- Low Privilege
- Complexity
- Theoretical
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
On DMA allocation failure in vmxnet3_rq_create for the data ring base, vmxnet3_rq_destroy_all_rxdataring leaves rq->data_ring.desc_size nonzero, allowing the hypervisor to dereference an invalid data ring descriptor during packet reception and trigger skb_panic.
Why it matters to the business
Virtual machines using the vmxnet3 paravirtualized NIC can experience sudden kernel crashes and reboots under memory pressure, causing unplanned downtime for workloads running on affected Linux kernels.
How an attack unfolds
An attacker or workload triggers a transient low-memory condition during vmxnet3 receive queue initialization; the subsequent packet receive path in the hypervisor then references the stale descriptor size, causing an invalid opcode exception and kernel panic.
How to fix it
Upgrade to a kernel containing commit 9ee14af24e67ef170108db547f7d1f701b3f2bc5 (or later stable equivalent) which sets rq->data_ring.desc_size = 0 on allocation failure; rebuild and reboot affected hosts.
How to confirm the fix worked
Confirm the fixed commit is present in the running kernel source; reproduce a vmxnet3 data-ring allocation failure under memory pressure and verify that desc_size is zeroed and no skb_panic occurs.
Typical attack path
- Trigger memory allocation failure inside vmxnet3_rq_create for rq->data_ring.base
- Call path reaches vmxnet3_rq_destroy_all_rxdataring without clearing desc_size
- Hypervisor continues to reference the non-zero desc_size on later packet reception
- vmxnet3_rq_rx_complete attempts skb_put on an invalid buffer, hitting skb_panic
How to detect it
Search kernel logs and vmcore for "skb_panic" combined with "vmxnet3_rq_rx_complete" or "vmxnet3" module; inspect dmesg for "dma allocation failure" messages near vmxnet3_rq_create failures.
- skb_panic+0x4d/0x4f
- vmxnet3_rq_rx_complete
- invalid opcode: 0000 [#1] PREEMPT SMP
- rq->data_ring.desc_size
What your security team should do
- Prioritize patching vmxnet3 hosts within maintenance windows before the next memory-pressure event
- Add kernel panic monitoring for skb_panic and vmxnet3 symbols to existing alerting
- Consider disabling vmxnet3 RX data ring feature if patching cannot be completed promptly
The record
In the Linux kernel, the following vulnerability has been resolved: vmxnet3: disable rx data ring on dma allocation failure When vmxnet3_rq_create() fails to allocate memory for rq->data_ring.base, the subsequent call to vmxnet3_rq_destroy_all_rxdataring does not reset rq->data_ring.desc_size for the data ring that failed, which presumably causes the hypervisor to reference it on packet reception. To fix this bug, rq->data_ring.desc_size needs to be set to 0 to tell the hypervisor to disable this feature. [ 95.436876] kernel BUG at net/core/skbuff.c:207! [ 95.439074] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [ 95.440411] CPU: 7 PID: 0 Comm: swapper/7 Not tainted 6.9.3-dirty #1 [ 95.441558] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018 [ 95.443481] RIP: 0010:skb_panic+0x4d/0x4f [ 95.444404] Code: 4f 70 50 8b 87 c0 00 00 00 50 8b 87 bc 00 00 00 50 ff b7 d0 00 00 00 4c 8b 8f c8 00 00 00 48 c7 c7 68 e8 be 9f e8 63 58 f9 ff <0f> 0b 48 8b 14 24 48 c7 c1 d0 73 65 9f e8 a1 ff ff ff 48 8b 14 24 [ 95.447684] RSP: 0018:ffffa13340274dd0 EFLAGS: 00010246 [ 95.448762] RAX: 0000000000000089 RBX: ffff8fbbc72b02d0 RCX: 000000000000083f [ 95.450148] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 95.451520] RBP: 000000000000002d R08: 0000000000000000 R09: ffffa13340274c60 [ 95.452886] R10: ffffffffa04ed468 R11: 0000000000000002 R12: 0000000000000000 [ 95.454293] R13: ffff8fbbdab3c2d0 R14: ffff8fbbdbd829e0 R15: ffff8fbbdbd809e0 [ 95.455682] FS: 0000000000000000(0000) GS:ffff8fbeefd80000(0000) knlGS:0000000000000000 [ 95.457178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.458340] CR2: 00007fd0d1f650c8 CR3: 0000000115f28000 CR4: 00000000000406f0 [ 95.459791] Call Trace: [ 95.460515] <IRQ> [ 95.461180] ? __die_body.cold+0x19/0x27 [ 95.462150] ? die+0x2e/0x50 [ 95.462976] ? do_trap+0xca/0x110 [ 95.463973] ? do_error_trap+0x6a/0x90 [ 95.464966] ? skb_panic+0x4d/0x4f [ 95.465901] ? exc_invalid_op+0x50/0x70 [ 95.466849] ? skb_panic+0x4d/0x4f [ 95.467718] ? asm_exc_invalid_op+0x1a/0x20 [ 95.468758] ? skb_panic+0x4d/0x4f [ 95.469655] skb_put.cold+0x10/0x10 [ 95.470573] vmxnet3_rq_rx_complete+0x862/0x11e0 [vmxnet3] [ 95.471853] vmxnet3_poll_rx_only+0x36/0xb0 [vmxnet3] [ 95.473185] __napi_poll+0x2b/0x160 [ 95.474145] net_rx_action+0x2c6/0x3b0 [ 95.475115] handle_softirqs+0xe7/0x2a0 [ 95.476122] __irq_exit_rcu+0x97/0xb0 [ 95.477109] common_interrupt+0x85/0xa0 [ 95.478102] </IRQ> [ 95.478846] <TASK> [ 95.479603] asm_common_interrupt+0x26/0x40 [ 95.480657] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 95.481801] Code: 22 d7 e9 54 87 01 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 ba 3b 00 fb f4 <e9> 2c 87 01 00 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 95.485563] RSP: 0018:ffffa133400ffe58 EFLAGS: 00000246 [ 95.486882] RAX: 0000000000004000 RBX: ffff8fbbc1d14064 RCX: 0000000000000000 [ 95.488477] RDX: ffff8fbeefd80000 RSI: ffff8fbbc1d14000 RDI: 0000000000000001 [ 95.490067] RBP: ffff8fbbc1d14064 R08: ffffffffa0652260 R09: 00000000000010d3 [ 95.491683] R10: 0000000000000018 R11: ffff8fbeefdb4764 R12: ffffffffa0652260 [ 95.493389] R13: ffffffffa06522e0 R14: 0000000000000001 R15: 0000000000000000 [ 95.495035] acpi_safe_halt+0x14/0x20 [ 95.496127] acpi_idle_do_entry+0x2f/0x50 [ 95.497221] acpi_idle_enter+0x7f/0xd0 [ 95.498272] cpuidle_enter_state+0x81/0x420 [ 95.499375] cpuidle_enter+0x2d/0x40 [ 95.500400] do_idle+0x1e5/0x240 [ 95.501385] cpu_startup_entry+0x29/0x30 [ 95.502422] start_secondary+0x11c/0x140 [ 95.503454] common_startup_64+0x13e/0x141 [ 95.504466] </TASK> [ 95.505197] Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ip ---truncated---
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:13 | linux | 0 | 6.9.7-1 |
| Linux | Kernel | 6.3.0 | 6.6.35 |
| Red Hat:enterprise_linux:9::appstream | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debug-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-doc | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-rt-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-tools-libs-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-uki-virt-addons | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | libperf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | libperf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | python3-perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | python3-perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | rtla | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::appstream | rv | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debug-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-doc | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-kvm | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-rt-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-libs | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-tools-libs-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-uki-virt-addons | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | kernel-zfcpdump-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | libperf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | libperf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | python3-perf | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | python3-perf-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | rtla | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::baseos | rv | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | bpftool | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | bpftool-debuginfo | 0 | 0:7.4.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-64k-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-abi-stablelists | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-cross-headers | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-devel | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-devel-matched | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules-core | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-modules-extra | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debug-uki-virt | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-aarch64 | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-ppc64le | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-s390x | 0 | 0:5.14.0-503.11.1.el9_5 |
| Red Hat:enterprise_linux:9::crb | kernel-debuginfo-common-x86_64 | 0 | 0:5.14.0-503.11.1.el9_5 |
Related vulnerabilities
- CVE-2025-39682 In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of… Also affects linux
- CVE-2025-38562 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2023-3867 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out of… Also affects linux
- CVE-2023-3865 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix… Also affects linux
- CVE-2025-38352 In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix… Also affects linux
- CVE-2025-37924 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix… Also affects linux
- CVE-2025-22037 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null… Also affects linux
- CVE-2025-21813 In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix… Also affects linux