Lucene search

K
f5F5F5:K000140297
HistoryJul 25, 2024 - 12:00 a.m.

K000140297: Speculative race condition vulnerability CVE-2024-26602

2024-07-2500:00:00
my.f5.com
14
linux kernel
vulnerability fix
race condition

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

Low

Security Advisory Description

In the Linux kernel, the following vulnerability has been resolved: sched/membarrier: reduce the ability to hammer on sys_membarrier On some systems, sys_membarrier can be very expensive, causing overall slowdowns for everything. So put a lock on the path in order to serialize the accesses to prevent the ability for this to be called at too high of a frequency and saturate the machine. (CVE-2024-26602)

Impact

An authenticated attacker can exploit this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative executable code paths.

Affected configurations

Vulners
Node
f5big-ip_nextMatch20.1.0
OR
f5big-ip_nextMatch20.1.1
OR
f5big-ip_nextMatch20.2.0
OR
f5big-ip_nextMatch20.2.1
OR
f5big-ip_nextMatch1.1.0
OR
f5big-ip_nextMatch1.1.1
OR
f5big-ip_nextMatch1.2.0
OR
f5big-ip_nextMatch1.2.1
OR
f5big-ip_nextMatch1.3.0
OR
f5big-ip_dnsMatch1.1.0
OR
f5big-ip_dnsMatch1.1.1
OR
f5big-ip_dnsMatch1.2.0
OR
f5big-ip_dnsMatch1.2.1
OR
f5big-ip_dnsMatch1.3.0
OR
f5big-ip_nextMatch1.1.0
OR
f5big-ip_nextMatch1.1.1
OR
f5big-ip_nextMatch1.2.0
OR
f5big-ip_nextMatch1.2.1
OR
f5big-ip_nextMatch1.3.0
OR
f5big-ip_ltmMatch20.1.0
OR
f5big-ip_ltmMatch20.2.0
OR
f5big-ip_ltmMatch20.2.1
OR
f5big-ip_nextMatch1.5.0
OR
f5big-ip_nextMatch1.6.0
OR
f5big-ip_nextMatch1.7.0
OR
f5big-ip_nextMatch1.7.1
OR
f5big-ip_nextMatch1.7.2
OR
f5big-ip_nextMatch1.7.3
OR
f5big-ip_nextMatch1.7.4
OR
f5big-ip_nextMatch1.7.5
OR
f5big-ip_nextMatch1.7.6
OR
f5big-ip_nextMatch1.7.7
OR
f5big-ip_nextMatch1.7.8
OR
f5big-ip_nextMatch1.8.0
OR
f5big-ip_nextMatch1.8.2
OR
f5big-ip_nextMatch1.9.0
OR
f5big-ip_nextMatch1.9.1
OR
f5big-ip_nextMatch1.9.2
OR
f5big-ip_nextMatch20.1.0
OR
f5big-ip_nextMatch20.2.0
OR
f5big-ip_nextMatch20.2.1
OR
f5big-ipMatch15.1.0
OR
f5big-ipMatch15.1.1
OR
f5big-ipMatch15.1.10
OR
f5big-ipMatch15.1.2
OR
f5big-ipMatch15.1.3
OR
f5big-ipMatch15.1.4
OR
f5big-ipMatch15.1.5
OR
f5big-ipMatch15.1.6
OR
f5big-ipMatch15.1.7
OR
f5big-ipMatch15.1.8
OR
f5big-ipMatch15.1.9
OR
f5big-ip_afmMatch15.1.0
OR
f5big-ip_afmMatch15.1.1
OR
f5big-ip_afmMatch15.1.10
OR
f5big-ip_afmMatch15.1.2
OR
f5big-ip_afmMatch15.1.3
OR
f5big-ip_afmMatch15.1.4
OR
f5big-ip_afmMatch15.1.5
OR
f5big-ip_afmMatch15.1.6
OR
f5big-ip_afmMatch15.1.7
OR
f5big-ip_afmMatch15.1.8
OR
f5big-ip_afmMatch15.1.9
OR
f5big-ip_afmMatch16.1.0
OR
f5big-ip_afmMatch16.1.1
OR
f5big-ip_afmMatch16.1.2
OR
f5big-ip_afmMatch16.1.3
OR
f5big-ip_afmMatch16.1.4
OR
f5big-ip_afmMatch17.1.0
OR
f5big-ip_afmMatch17.1.1
OR
f5big-ip_analyticsMatch15.1.0
OR
f5big-ip_analyticsMatch15.1.1
OR
f5big-ip_analyticsMatch15.1.10
OR
f5big-ip_analyticsMatch15.1.2
OR
f5big-ip_analyticsMatch15.1.3
OR
f5big-ip_analyticsMatch15.1.4
OR
f5big-ip_analyticsMatch15.1.5
OR
f5big-ip_analyticsMatch15.1.6
OR
f5big-ip_analyticsMatch15.1.7
OR
f5big-ip_analyticsMatch15.1.8
OR
f5big-ip_analyticsMatch15.1.9
OR
f5big-ip_analyticsMatch16.1.0
OR
f5big-ip_analyticsMatch16.1.1
OR
f5big-ip_analyticsMatch16.1.2
OR
f5big-ip_analyticsMatch16.1.3
OR
f5big-ip_analyticsMatch16.1.4
OR
f5big-ip_analyticsMatch17.1.0
OR
f5big-ip_analyticsMatch17.1.1
OR
f5big-ip_apmMatch15.1.0
OR
f5big-ip_apmMatch15.1.1
OR
f5big-ip_apmMatch15.1.10
OR
f5big-ip_apmMatch15.1.2
OR
f5big-ip_apmMatch15.1.3
OR
f5big-ip_apmMatch15.1.4
OR
f5big-ip_apmMatch15.1.5
OR
f5big-ip_apmMatch15.1.6
OR
f5big-ip_apmMatch15.1.7
OR
f5big-ip_apmMatch15.1.8
OR
f5big-ip_apmMatch15.1.9
OR
f5big-ip_apmMatch16.1.0
OR
f5big-ip_apmMatch16.1.1
OR
f5big-ip_apmMatch16.1.2
OR
f5big-ip_apmMatch16.1.3
OR
f5big-ip_apmMatch16.1.4
OR
f5big-ip_apmMatch17.1.0
OR
f5big-ip_apmMatch17.1.1
OR
f5big-ip_asmMatch15.1.0
OR
f5big-ip_asmMatch15.1.1
OR
f5big-ip_asmMatch15.1.10
OR
f5big-ip_asmMatch15.1.2
OR
f5big-ip_asmMatch15.1.3
OR
f5big-ip_asmMatch15.1.4
OR
f5big-ip_asmMatch15.1.5
OR
f5big-ip_asmMatch15.1.6
OR
f5big-ip_asmMatch15.1.7
OR
f5big-ip_asmMatch15.1.8
OR
f5big-ip_asmMatch15.1.9
OR
f5big-ip_asmMatch16.1.0
OR
f5big-ip_asmMatch16.1.1
OR
f5big-ip_asmMatch16.1.2
OR
f5big-ip_asmMatch16.1.3
OR
f5big-ip_asmMatch16.1.4
OR
f5big-ip_asmMatch17.1.0
OR
f5big-ip_asmMatch17.1.1
OR
f5big-ip_dnsMatch15.1.0
OR
f5big-ip_dnsMatch15.1.1
OR
f5big-ip_dnsMatch15.1.10
OR
f5big-ip_dnsMatch15.1.2
OR
f5big-ip_dnsMatch15.1.3
OR
f5big-ip_dnsMatch15.1.4
OR
f5big-ip_dnsMatch15.1.5
OR
f5big-ip_dnsMatch15.1.6
OR
f5big-ip_dnsMatch15.1.7
OR
f5big-ip_dnsMatch15.1.8
OR
f5big-ip_dnsMatch15.1.9
OR
f5big-ip_dnsMatch16.1.0
OR
f5big-ip_dnsMatch16.1.1
OR
f5big-ip_dnsMatch16.1.2
OR
f5big-ip_dnsMatch16.1.3
OR
f5big-ip_dnsMatch16.1.4
OR
f5big-ip_dnsMatch17.1.0
OR
f5big-ip_dnsMatch17.1.1
OR
f5big-ipMatch15.1.0
OR
f5big-ipMatch15.1.1
OR
f5big-ipMatch15.1.10
OR
f5big-ipMatch15.1.2
OR
f5big-ipMatch15.1.3
OR
f5big-ipMatch15.1.4
OR
f5big-ipMatch15.1.5
OR
f5big-ipMatch15.1.6
OR
f5big-ipMatch15.1.7
OR
f5big-ipMatch15.1.8
OR
f5big-ipMatch15.1.9
OR
f5big-ipMatch16.1.0
OR
f5big-ipMatch16.1.1
OR
f5big-ipMatch16.1.2
OR
f5big-ipMatch16.1.3
OR
f5big-ipMatch16.1.4
OR
f5big-ipMatch17.1.0
OR
f5big-ipMatch17.1.1
OR
f5big-ip_link_controllerMatch15.1.0
OR
f5big-ip_link_controllerMatch15.1.1
OR
f5big-ip_link_controllerMatch15.1.10
OR
f5big-ip_link_controllerMatch15.1.2
OR
f5big-ip_link_controllerMatch15.1.3
OR
f5big-ip_link_controllerMatch15.1.4
OR
f5big-ip_link_controllerMatch15.1.5
OR
f5big-ip_link_controllerMatch15.1.6
OR
f5big-ip_link_controllerMatch15.1.7
OR
f5big-ip_link_controllerMatch15.1.8
OR
f5big-ip_link_controllerMatch15.1.9
OR
f5big-ip_link_controllerMatch16.1.0
OR
f5big-ip_link_controllerMatch16.1.1
OR
f5big-ip_link_controllerMatch16.1.2
OR
f5big-ip_link_controllerMatch16.1.3
OR
f5big-ip_link_controllerMatch16.1.4
OR
f5big-ip_link_controllerMatch17.1.0
OR
f5big-ip_link_controllerMatch17.1.1
OR
f5big-ip_ltmMatch15.1.0
OR
f5big-ip_ltmMatch15.1.1
OR
f5big-ip_ltmMatch15.1.10
OR
f5big-ip_ltmMatch15.1.2
OR
f5big-ip_ltmMatch15.1.3
OR
f5big-ip_ltmMatch15.1.4
OR
f5big-ip_ltmMatch15.1.5
OR
f5big-ip_ltmMatch15.1.6
OR
f5big-ip_ltmMatch15.1.7
OR
f5big-ip_ltmMatch15.1.8
OR
f5big-ip_ltmMatch15.1.9
OR
f5big-ip_ltmMatch16.1.0
OR
f5big-ip_ltmMatch16.1.1
OR
f5big-ip_ltmMatch16.1.2
OR
f5big-ip_ltmMatch16.1.3
OR
f5big-ip_ltmMatch16.1.4
OR
f5big-ip_ltmMatch17.1.0
OR
f5big-ip_ltmMatch17.1.1
OR
f5big-ip_pemMatch15.1.0
OR
f5big-ip_pemMatch15.1.1
OR
f5big-ip_pemMatch15.1.10
OR
f5big-ip_pemMatch15.1.2
OR
f5big-ip_pemMatch15.1.3
OR
f5big-ip_pemMatch15.1.4
OR
f5big-ip_pemMatch15.1.5
OR
f5big-ip_pemMatch15.1.6
OR
f5big-ip_pemMatch15.1.7
OR
f5big-ip_pemMatch15.1.8
OR
f5big-ip_pemMatch15.1.9
OR
f5big-ip_pemMatch16.1.0
OR
f5big-ip_pemMatch16.1.1
OR
f5big-ip_pemMatch16.1.2
OR
f5big-ip_pemMatch16.1.3
OR
f5big-ip_pemMatch16.1.4
OR
f5big-ip_pemMatch17.1.0
OR
f5big-ip_pemMatch17.1.1
OR
f5nginx_agentMatch2.17.0
OR
f5nginx_agentMatch2.18.0
OR
f5nginx_agentMatch2.19.0
OR
f5nginx_agentMatch2.20.0
OR
f5nginx_agentMatch2.20.1
OR
f5nginx_agentMatch2.22.0
OR
f5nginx_agentMatch2.22.1
OR
f5nginx_agentMatch2.23.0
OR
f5nginx_agentMatch2.23.1
OR
f5nginx_agentMatch2.23.2
OR
f5nginx_agentMatch2.23.3
OR
f5nginx_agentMatch2.24.0
OR
f5nginx_agentMatch2.24.1
OR
f5nginx_agentMatch2.25.0
OR
f5nginx_agentMatch2.25.1
OR
f5nginx_agentMatch2.26.0
OR
f5nginx_agentMatch2.26.1
OR
f5nginx_agentMatch2.26.2
OR
f5nginx_agentMatch2.27.0
OR
f5nginx_agentMatch2.28.0
OR
f5nginx_agentMatch2.28.1
OR
f5nginx_agentMatch2.29.0
OR
f5nginx_agentMatch2.30.0
OR
f5nginx_agentMatch2.30.1
OR
f5nginx_agentMatch2.30.2
OR
f5nginx_agentMatch2.30.3
OR
f5nginx_agentMatch2.31.0
OR
f5nginx_agentMatch2.31.1
OR
f5nginx_agentMatch2.31.2
OR
f5nginx_agentMatch2.32.0
OR
f5nginx_agentMatch2.32.1
OR
f5nginx_agentMatch2.32.2
OR
f5nginx_agentMatch2.33.0
OR
f5nginx_agentMatch2.34.0
OR
f5nginx_agentMatch2.34.1
OR
f5nginx_agentMatch2.35.0
OR
f5nginx_agentMatch2.35.1
OR
f5nginx_agentMatch2.36.0
OR
f5nginx_api_connectivity_managerMatch1.0.0
OR
f5nginx_api_connectivity_managerMatch1.1.0
OR
f5nginx_api_connectivity_managerMatch1.1.1
OR
f5nginx_api_connectivity_managerMatch1.2.0
OR
f5nginx_api_connectivity_managerMatch1.3.0
OR
f5nginx_api_connectivity_managerMatch1.3.1
OR
f5nginx_api_connectivity_managerMatch1.4.0
OR
f5nginx_api_connectivity_managerMatch1.4.1
OR
f5nginx_api_connectivity_managerMatch1.5.0
OR
f5nginx_api_connectivity_managerMatch1.6.0
OR
f5nginx_api_connectivity_managerMatch1.7.0
OR
f5nginx_api_connectivity_managerMatch1.8.0
OR
f5nginx_api_connectivity_managerMatch1.9.0
OR
f5nginx_api_connectivity_managerMatch1.9.1
OR
f5nginx_api_connectivity_managerMatch1.9.2
OR
f5nginx_app_protectMatch2.4.0
OR
f5nginx_app_protectMatch3.0.0
OR
f5nginx_app_protectMatch3.1.0
OR
f5nginx_app_protectMatch4.0.1
OR
f5nginx_app_protectMatch4.1.0
OR
f5nginx_app_protectMatch4.2.0
OR
f5nginx_app_protectMatch4.3.0
OR
f5nginx_app_protectMatch4.4.0
OR
f5nginx_app_protectMatch3.11.0
OR
f5nginx_app_protectMatch3.12.1
OR
f5nginx_app_protectMatch3.12.2
OR
f5nginx_app_protectMatch4.0.0
OR
f5nginx_app_protectMatch4.1.0
OR
f5nginx_app_protectMatch4.10.0
OR
f5nginx_app_protectMatch4.2.0
OR
f5nginx_app_protectMatch4.3.0
OR
f5nginx_app_protectMatch4.4.0
OR
f5nginx_app_protectMatch4.5.0
OR
f5nginx_app_protectMatch4.6.0
OR
f5nginx_app_protectMatch4.7.0
OR
f5nginx_app_protectMatch4.8.0
OR
f5nginx_app_protectMatch4.8.1
OR
f5nginx_app_protectMatch4.9.0
OR
f5nginx_app_protectMatch5.0.0
OR
f5nginx_app_protectMatch5.1.0
OR
f5nginx_app_protectMatch5.2.0
OR
f5nginx_controllerMatch3.18.3
OR
f5nginx_controllerMatch3.19.1-apim
OR
f5nginx_controllerMatch3.19.2-apim
OR
f5nginx_controllerMatch3.19.3-apim
OR
f5nginx_controllerMatch3.19.4-apim
OR
f5nginx_controllerMatch3.19.5-apim
OR
f5nginx_controllerMatch3.19.6-apim
OR
f5nginx_controllerMatch3.20.0
OR
f5nginx_controllerMatch3.20.1
OR
f5nginx_controllerMatch3.21.0
OR
f5nginx_controllerMatch3.22.0
OR
f5nginx_controllerMatch3.22.1
OR
f5nginx_controllerMatch3.22.2
OR
f5nginx_controllerMatch3.22.3
OR
f5nginx_controllerMatch3.22.4
OR
f5nginx_controllerMatch3.22.5
OR
f5nginx_controllerMatch3.22.6
OR
f5nginx_controllerMatch3.22.7
OR
f5nginx_controllerMatch3.22.8
OR
f5nginx_controllerMatch3.22.9
OR
f5nginx_ingress_controllerMatch1.12.5
OR
f5nginx_ingress_controllerMatch2.2.1
OR
f5nginx_ingress_controllerMatch2.2.2
OR
f5nginx_ingress_controllerMatch2.3.0
OR
f5nginx_ingress_controllerMatch2.4.0
OR
f5nginx_ingress_controllerMatch2.4.1
OR
f5nginx_ingress_controllerMatch2.4.2
OR
f5nginx_ingress_controllerMatch3.0.0
OR
f5nginx_ingress_controllerMatch3.0.1
OR
f5nginx_ingress_controllerMatch3.0.2
OR
f5nginx_ingress_controllerMatch3.1.0
OR
f5nginx_ingress_controllerMatch3.1.1
OR
f5nginx_ingress_controllerMatch3.2.0
OR
f5nginx_ingress_controllerMatch3.2.1
OR
f5nginx_ingress_controllerMatch3.3.0
OR
f5nginx_ingress_controllerMatch3.3.1
OR
f5nginx_ingress_controllerMatch3.4.0
OR
f5nginx_ingress_controllerMatch3.4.1
OR
f5nginx_ingress_controllerMatch3.4.2
OR
f5nginx_ingress_controllerMatch3.5.0
OR
f5nginx_ingress_controllerMatch3.5.1
OR
f5nginx_ingress_controllerMatch3.5.2
OR
f5nginx_ingress_controllerMatch3.6.0
OR
f5nginx_instance_managerMatch2.10.0
OR
f5nginx_instance_managerMatch2.10.1
OR
f5nginx_instance_managerMatch2.11.0
OR
f5nginx_instance_managerMatch2.12.0
OR
f5nginx_instance_managerMatch2.13.0
OR
f5nginx_instance_managerMatch2.13.1
OR
f5nginx_instance_managerMatch2.14.0
OR
f5nginx_instance_managerMatch2.14.1
OR
f5nginx_instance_managerMatch2.15.0
OR
f5nginx_instance_managerMatch2.15.1
OR
f5nginx_instance_managerMatch2.16.0
OR
f5nginx_instance_managerMatch2.17.0
OR
f5nginx_instance_managerMatch2.3.1
OR
f5nginx_instance_managerMatch2.4.0
OR
f5nginx_instance_managerMatch2.5.0
OR
f5nginx_instance_managerMatch2.5.1
OR
f5nginx_instance_managerMatch2.6.0
OR
f5nginx_instance_managerMatch2.7.0
OR
f5nginx_instance_managerMatch2.8.0
OR
f5nginx_instance_managerMatch2.9.0
OR
f5nginx_instance_managerMatch2.9.1
OR
f5nginx_security_monitoringMatch1.0.0
OR
f5nginx_security_monitoringMatch1.1.0
OR
f5nginx_security_monitoringMatch1.2.0
OR
f5nginx_security_monitoringMatch1.3.0
OR
f5nginx_security_monitoringMatch1.4.0
OR
f5nginx_security_monitoringMatch1.5.0
OR
f5nginx_security_monitoringMatch1.6.0
OR
f5nginx_security_monitoringMatch1.7.0
OR
f5nginx_security_monitoringMatch1.7.1
OR
f5nginxMatchr27plus
OR
f5nginxMatchr28plus
OR
f5nginxMatchr29plus
OR
f5nginxMatchr30plus
OR
f5nginxMatchr31plus
OR
f5nginxMatchr32plus
OR
f5nginx_service_meshMatch1.1.0
OR
f5nginx_service_meshMatch1.2.0
OR
f5nginx_service_meshMatch1.2.1
OR
f5nginx_service_meshMatch1.3.0
OR
f5nginx_service_meshMatch1.3.1
OR
f5nginx_service_meshMatch1.4.0
OR
f5nginx_service_meshMatch1.4.1
OR
f5nginx_service_meshMatch1.5.0
OR
f5nginx_service_meshMatch1.6.0
OR
f5nginx_service_meshMatch1.7.0
OR
f5nginx_service_meshMatch2.0.0
OR
f5nginxMatch1.27.0
OR
f5nginxMatch1.28.0
OR
f5nginxMatch1.29.0
OR
f5nginxMatch1.29.1
OR
f5nginxMatch1.30.0
OR
f5nginxMatch1.31.0
OR
f5nginxMatch1.31.1
OR
f5nginxMatch1.32.0
OR
f5nginxMatch1.32.1
OR
f5f5os-aMatch1.5.1
OR
f5f5os-aMatch1.5.2
OR
f5f5os-aMatch1.7.0
OR
f5f5os-cMatch1.6.0
OR
f5f5os-cMatch1.6.1
OR
f5f5os-cMatch1.6.2
OR
f5big-iq_centralized_managementMatch8.2.0
OR
f5big-iq_centralized_managementMatch8.3.0
OR
f5big-ip_ddos_hybrid_defenderMatch15.1.0
OR
f5big-ip_ddos_hybrid_defenderMatch15.1.1
OR
f5big-ip_ddos_hybrid_defenderMatch16.1.0
OR
f5big-ip_ddos_hybrid_defenderMatch17.1.0
OR
f5ssl_orchestratorMatch15.1.0
OR
f5ssl_orchestratorMatch15.1.1
OR
f5ssl_orchestratorMatch15.1.2
OR
f5ssl_orchestratorMatch15.1.9
OR
f5ssl_orchestratorMatch16.1.0
OR
f5ssl_orchestratorMatch16.1.1
OR
f5ssl_orchestratorMatch16.1.3
OR
f5ssl_orchestratorMatch16.1.4
OR
f5ssl_orchestratorMatch17.1.0
OR
f5ssl_orchestratorMatch17.1.1
OR
f5traffix_signaling_delivery_controllerMatch5.1.0
OR
f5traffix_signaling_delivery_controllerMatch5.2.0

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

Low