{ "cveId": "CVE-2024-41048", "url": "https://patchblox.com/security/cve/CVE-2024-41048", "summary": "CVE-2024-41048 is fixed in 56 products on 1 platform, first by DEBIAN-CVE-2024-41048, released July 29, 2024. It is not reported as exploited. Patch Radar priority: Routine.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: skmsg: Skip zero length skb in sk_msg_recvmsg W...", "description": "In the Linux kernel, the following vulnerability has been resolved: skmsg: Skip zero length skb in sk_msg_recvmsg When running BPF selftests (./test_progs -t sockmap_basic) on a Loongarch platform, the following kernel panic occurs: [...] Oops[#1]: CPU: 22 PID: 2824 Comm: test_progs Tainted: G OE 6.10.0-rc2\u002B #18 Hardware name: LOONGSON Dabieshan/Loongson-TC542F0, BIOS Loongson-UDK2018 ... ... ra: 90000000048bf6c0 sk_msg_recvmsg\u002B0x120/0x560 ERA: 9000000004162774 copy_page_to_iter\u002B0x74/0x1c0 CRMD: 000000b0 (PLV0 -IE -DA \u002BPG DACF=CC DACM=CC -WE) PRMD: 0000000c (PPLV0 \u002BPIE \u002BPWE) EUEN: 00000007 (\u002BFPE \u002BSXE \u002BASXE -BTE) ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7) ESTAT: 00010000 [PIL] (IS= ECode=1 EsubCode=0) BADV: 0000000000000040 PRID: 0014c011 (Loongson-64bit, Loongson-3C5000) Modules linked in: bpf_testmod(OE) xt_CHECKSUM xt_MASQUERADE xt_conntrack Process test_progs (pid: 2824, threadinfo=0000000000863a31, task=...) Stack : ... Call Trace: [\u003C9000000004162774\u003E] copy_page_to_iter\u002B0x74/0x1c0 [\u003C90000000048bf6c0\u003E] sk_msg_recvmsg\u002B0x120/0x560 [\u003C90000000049f2b90\u003E] tcp_bpf_recvmsg_parser\u002B0x170/0x4e0 [\u003C90000000049aae34\u003E] inet_recvmsg\u002B0x54/0x100 [\u003C900000000481ad5c\u003E] sock_recvmsg\u002B0x7c/0xe0 [\u003C900000000481e1a8\u003E] __sys_recvfrom\u002B0x108/0x1c0 [\u003C900000000481e27c\u003E] sys_recvfrom\u002B0x1c/0x40 [\u003C9000000004c076ec\u003E] do_syscall\u002B0x8c/0xc0 [\u003C9000000003731da4\u003E] handle_syscall\u002B0xc4/0x160 Code: ... ---[ end trace 0000000000000000 ]--- Kernel panic - not syncing: Fatal exception Kernel relocated by 0x3510000 .text @ 0x9000000003710000 .data @ 0x9000000004d70000 .bss @ 0x9000000006469400 ---[ end Kernel panic - not syncing: Fatal exception ]--- [...] This crash happens every time when running sockmap_skb_verdict_shutdown subtest in sockmap_basic. This crash is because a NULL pointer is passed to page_address() in the sk_msg_recvmsg(). Due to the different implementations depending on the architecture, page_address(NULL) will trigger a panic on Loongarch platform but not on x86 platform. So this bug was hidden on x86 platform for a while, but now it is exposed on Loongarch platform. The root cause is that a zero length skb (skb-\u003Elen == 0) was put on the queue. This zero length skb is a TCP FIN packet, which was sent by shutdown(), invoked in test_sockmap_skb_verdict_shutdown(): \tshutdown(p1, SHUT_WR); In this case, in sk_psock_skb_ingress_enqueue(), num_sge is zero, and no page is put to this sge (see sg_set_page in sg_set_page), but this empty sge is queued into ingress_msg list. And in sk_msg_recvmsg(), this empty sge is used, and a NULL page is got by sg_page(sge). Pass this NULL page to copy_page_to_iter(), which passes it to kmap_local_page() and to page_address(), then kernel panics. To solve this, we should skip this zero length skb. So in sk_msg_recvmsg(), if copy is zero, that means it\u0027s a zero length skb, skip invoking copy_page_to_iter(). We are using the EFAULT return triggered by copy_page_to_iter to check for is_fin in tcp_bpf.c.", "published": "2024-07-29T15:15:13Z", "severity": "medium", "cvss": 5.5, "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "epss": 0.00818, "epssPercentile": 0.574, "priority": "Routine", "priorityTier": 4, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "bpftool", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "bpftool", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "dtb-aarch64", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-debug", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-default", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1.150600.12.8.3", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1.150600.12.8.3", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-devel", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-docs", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-headers", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-kvmsmall", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-libbpf", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-libbpf-devel", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-libbpf-static", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-livepatch-6.1.102-108.177", "release": "amzn 2023", "fixedVersion": "1.0-0.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP6-RT_Update_2", "release": "sles 15.6", "fixedVersion": "1-150600.1.3.2", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP6_Update_4", "release": "sles 15.6", "fixedVersion": "1-150600.13.3.3", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-obs-qa", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.8.3", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-rt_debug", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.8.3", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-source", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-source-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-source-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-source-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.8.3", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-syms", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-syms-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-syms-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-syms-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.8.1", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-tools", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container-debug", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container-debug", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 8", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:5.15.0-210.163.7.el9uek", "fix": "ELSA-2024-12618", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12618", "released": "2024-09-12T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "linux", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.1.106-1", "fix": "DEBIAN-CVE-2024-41048", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-41048", "released": "2024-07-29T15:15:13Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.9.10-1", "fix": "DEBIAN-CVE-2024-41048", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-41048", "released": "2024-07-29T15:15:13Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "6.9.10-1", "fix": "DEBIAN-CVE-2024-41048", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-41048", "released": "2024-07-29T15:15:13Z" }, { "platform": "linux", "product": "perf", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "perf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "python3-perf", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" }, { "platform": "linux", "product": "python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.102-108.177.amzn2023", "fix": "ALAS2023-2024-679", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-679", "released": "2024-08-01T04:06:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-09T13:31:49Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }