{ "cveId": "CVE-2024-45001", "url": "https://patchblox.com/security/cve/CVE-2024-45001", "summary": "CVE-2024-45001 is fixed in 40 products on 1 platform, first by DEBIAN-CVE-2024-45001, released September 4, 2024. It is not reported as exploited. Patch Radar priority: Routine.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix RX buf alloc_size alignment and a...", "description": "In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix RX buf alloc_size alignment and atomic op panic The MANA driver\u0027s RX buffer alloc_size is passed into napi_build_skb() to create SKB. skb_shinfo(skb) is located at the end of skb, and its alignment is affected by the alloc_size passed into napi_build_skb(). The size needs to be aligned properly for better performance and atomic operations. Otherwise, on ARM64 CPU, for certain MTU settings like 4000, atomic operations may panic on the skb_shinfo(skb)-\u003Edataref due to alignment fault. To fix this bug, add proper alignment to the alloc_size calculation. Sample panic info: [ 253.298819] Unable to handle kernel paging request at virtual address ffff000129ba5cce [ 253.300900] Mem abort info: [ 253.301760] ESR = 0x0000000096000021 [ 253.302825] EC = 0x25: DABT (current EL), IL = 32 bits [ 253.304268] SET = 0, FnV = 0 [ 253.305172] EA = 0, S1PTW = 0 [ 253.306103] FSC = 0x21: alignment fault Call trace: __skb_clone\u002B0xfc/0x198 skb_clone\u002B0x78/0xe0 raw6_local_deliver\u002B0xfc/0x228 ip6_protocol_deliver_rcu\u002B0x80/0x500 ip6_input_finish\u002B0x48/0x80 ip6_input\u002B0x48/0xc0 ip6_sublist_rcv_finish\u002B0x50/0x78 ip6_sublist_rcv\u002B0x1cc/0x2b8 ipv6_list_rcv\u002B0x100/0x150 __netif_receive_skb_list_core\u002B0x180/0x220 netif_receive_skb_list_internal\u002B0x198/0x2a8 __napi_poll\u002B0x138/0x250 net_rx_action\u002B0x148/0x330 handle_softirqs\u002B0x12c/0x3a0", "published": "2024-09-04T20:15:08Z", "severity": "medium", "cvss": 5.5, "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "epss": 0.00635, "epssPercentile": 0.50712, "priority": "Routine", "priorityTier": 4, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "bpftool", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "dtb-aarch64", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-64kb", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.14.1", "fix": "SUSE-SU-2024:3551-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3551-1", "released": "2024-10-08T15:03:16Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.14.1", "fix": "SUSE-SU-2024:3551-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3551-1", "released": "2024-10-08T15:03:16Z" }, { "platform": "linux", "product": "kernel-coco", "release": "sles 15.6", "fixedVersion": "6.4.0-15061.6.coco15sp6.1", "fix": "SUSE-SU-2024:3553-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3553-1", "released": "2024-10-08T15:10:23Z" }, { "platform": "linux", "product": "kernel-coco_debug", "release": "sles 15.6", "fixedVersion": "6.4.0-15061.6.coco15sp6.1", "fix": "SUSE-SU-2024:3553-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3553-1", "released": "2024-10-08T15:10:23Z" }, { "platform": "linux", "product": "kernel-debug", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-default", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.25.1.150600.12.10.2", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.25.1.150600.12.10.2", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-docs", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.25.2", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.25.2", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-kvmsmall", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP6-RT_Update_4", "release": "sles 15.6", "fixedVersion": "1-150600.1.3.1", "fix": "SUSE-SU-2024:3564-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3564-1", "released": "2024-10-09T09:09:06Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP6_Update_5", "release": "sles 15.6", "fixedVersion": "1-150600.13.3.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.25.2", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.25.2", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-obs-qa", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.14.1", "fix": "SUSE-SU-2024:3564-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3564-1", "released": "2024-10-09T09:09:06Z" }, { "platform": "linux", "product": "kernel-rt_debug", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.14.1", "fix": "SUSE-SU-2024:3564-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3564-1", "released": "2024-10-09T09:09:06Z" }, { "platform": "linux", "product": "kernel-source", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-source-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.14.1", "fix": "SUSE-SU-2024:3551-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3551-1", "released": "2024-10-08T15:03:16Z" }, { "platform": "linux", "product": "kernel-source-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.14.1", "fix": "SUSE-SU-2024:3551-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3551-1", "released": "2024-10-08T15:03:16Z" }, { "platform": "linux", "product": "kernel-source-coco", "release": "sles 15.6", "fixedVersion": "6.4.0-15061.6.coco15sp6.1", "fix": "SUSE-SU-2024:3553-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3553-1", "released": "2024-10-08T15:10:23Z" }, { "platform": "linux", "product": "kernel-source-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.14.1", "fix": "SUSE-SU-2024:3564-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3564-1", "released": "2024-10-09T09:09:06Z" }, { "platform": "linux", "product": "kernel-syms", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-syms-azure", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.8.14.1", "fix": "SUSE-SU-2024:3551-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3551-1", "released": "2024-10-08T15:03:16Z" }, { "platform": "linux", "product": "kernel-syms-azure", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.8.14.1", "fix": "SUSE-SU-2024:3551-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3551-1", "released": "2024-10-08T15:03:16Z" }, { "platform": "linux", "product": "kernel-syms-coco", "release": "sles 15.6", "fixedVersion": "6.4.0-15061.6.coco15sp6.1", "fix": "SUSE-SU-2024:3553-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3553-1", "released": "2024-10-08T15:10:23Z" }, { "platform": "linux", "product": "kernel-syms-rt", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.10.14.1", "fix": "SUSE-SU-2024:3564-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3564-1", "released": "2024-10-09T09:09:06Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container-debug", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-container-debug", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 8", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:5.15.0-303.171.5.2.el9uek", "fix": "ELSA-2024-12887", "url": "https://patchblox.com/security/fix/linux/elsa-2024-12887", "released": "2024-12-18T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "opensuse-leap 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 15.6", "fixedVersion": "6.4.0-150600.23.25.1", "fix": "SUSE-SU-2024:3561-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2024-3561-1", "released": "2024-10-09T08:45:13Z" }, { "platform": "linux", "product": "linux", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.1.129-1", "fix": "DEBIAN-CVE-2024-45001", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-45001", "released": "2024-09-04T20:15:08Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.10.7-1", "fix": "DEBIAN-CVE-2024-45001", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-45001", "released": "2024-09-04T20:15:08Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "6.10.7-1", "fix": "DEBIAN-CVE-2024-45001", "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-45001", "released": "2024-09-04T20:15:08Z" } ], "noFixYet": [], "dataAsOf": "2026-11-09T01:18:40Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }