{ "cveId": "CVE-2024-41070", "url": "https://patchblox.com/security/cve/CVE-2024-41070", "summary": "CVE-2024-41070 is fixed in 40 products on 1 platform, first by DEBIAN-CVE-2024-41070, released July 29, 2024. It is not reported as exploited. Patch Radar priority: High.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tc...", "description": "In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() Al reported a possible use-after-free (UAF) in kvm_spapr_tce_attach_iommu_group(). It looks up \u0060stt\u0060 from tablefd, but then continues to use it after doing fdput() on the returned fd. After the fdput() the tablefd is free to be closed by another thread. The close calls kvm_spapr_tce_release() and then release_spapr_tce_table() (via call_rcu()) which frees \u0060stt\u0060. Although there are calls to rcu_read_lock() in kvm_spapr_tce_attach_iommu_group() they are not sufficient to prevent the UAF, because \u0060stt\u0060 is used outside the locked regions. With an artifcial delay after the fdput() and a userspace program which triggers the race, KASAN detects the UAF: BUG: KASAN: slab-use-after-free in kvm_spapr_tce_attach_iommu_group\u002B0x298/0x720 [kvm] Read of size 4 at addr c000200027552c30 by task kvm-vfio/2505 CPU: 54 PID: 2505 Comm: kvm-vfio Not tainted 6.10.0-rc3-next-20240612-dirty #1 Hardware name: 8335-GTH POWER9 0x4e1202 opal:skiboot-v6.5.3-35-g1851b2a06 PowerNV Call Trace: dump_stack_lvl\u002B0xb4/0x108 (unreliable) print_report\u002B0x2b4/0x6ec kasan_report\u002B0x118/0x2b0 __asan_load4\u002B0xb8/0xd0 kvm_spapr_tce_attach_iommu_group\u002B0x298/0x720 [kvm] kvm_vfio_set_attr\u002B0x524/0xac0 [kvm] kvm_device_ioctl\u002B0x144/0x240 [kvm] sys_ioctl\u002B0x62c/0x1810 system_call_exception\u002B0x190/0x440 system_call_vectored_common\u002B0x15c/0x2ec ... Freed by task 0: ... kfree\u002B0xec/0x3e0 release_spapr_tce_table\u002B0xd4/0x11c [kvm] rcu_core\u002B0x568/0x16a0 handle_softirqs\u002B0x23c/0x920 do_softirq_own_stack\u002B0x6c/0x90 do_softirq_own_stack\u002B0x58/0x90 __irq_exit_rcu\u002B0x218/0x2d0 irq_exit\u002B0x30/0x80 arch_local_irq_restore\u002B0x128/0x230 arch_local_irq_enable\u002B0x1c/0x30 cpuidle_enter_state\u002B0x134/0x5cc cpuidle_enter\u002B0x6c/0xb0 call_cpuidle\u002B0x7c/0x100 do_idle\u002B0x394/0x410 cpu_startup_entry\u002B0x60/0x70 start_secondary\u002B0x3fc/0x410 start_secondary_prolog\u002B0x10/0x14 Fix it by delaying the fdput() until \u0060stt\u0060 is no longer in use, which is effectively the entire function. To keep the patch minimal add a call to fdput() at each of the existing return paths. Future work can convert the function to goto or __cleanup style cleanup. With the fix in place the test case no longer triggers the UAF.", "published": "2024-07-29T15:15:14Z", "severity": "high", "cvss": 7.8, "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "epss": 0.0023, "epssPercentile": 0.13901, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "bpftool", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "dtb-aarch64", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-debug", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-default", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1.150600.12.8.3", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1.150600.12.8.3", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-docs", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-kvmsmall", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP6-RT_Update_2", "release": "sles 15.6", "fixedVersion": "1-150600.1.3.2", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP6_Update_4", "release": "sles 15.6", "fixedVersion": "1-150600.13.3.3", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-obs-qa", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.8.3", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-rt_debug", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.8.3", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-source", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-source-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-source-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-source-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.8.3", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-syms", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-syms-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-syms-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.11.1", "fix": "SUSE-SU-2024:3194-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3194-1", "released": "2024-09-10T09:06:25Z" }, { "platform": "linux", "product": "kernel-syms-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.8.1", "fix": "SUSE-SU-2024:3195-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3195-1", "released": "2024-09-10T14:10:24Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el8uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el7uek", "fix": "ELSA-2024-12782", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12782", "released": "2024-10-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container-debug", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container-debug", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el7uek", "fix": "ELSA-2024-12782", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12782", "released": "2024-10-14T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container-debug", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el8uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el8uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el8uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el8uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 8", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:5.15.0-302.167.6.el9uek", "fix": "ELSA-2024-12815", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12815", "released": "2024-11-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el7uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools-libs", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el7uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.22.1", "fix": "SUSE-SU-2024:3383-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3383-1", "released": "2024-09-23T08:29:55Z" }, { "platform": "linux", "product": "linux", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.1.106-1", "fix": "DEBIAN-CVE-2024-41070", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-41070", "released": "2024-07-29T15:15:14Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.9.11-1", "fix": "DEBIAN-CVE-2024-41070", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-41070", "released": "2024-07-29T15:15:14Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "6.9.11-1", "fix": "DEBIAN-CVE-2024-41070", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-41070", "released": "2024-07-29T15:15:14Z" }, { "platform": "linux", "product": "perf", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el7uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" }, { "platform": "linux", "product": "python-perf", "release": "ol 8", "fixedVersion": "0:5.4.17-2136.336.5.1.el7uek", "fix": "ELSA-2024-12780", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12780", "released": "2024-10-11T00:00:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-09T19:38:12Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }