Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale System are now included in 6.2.2.1 and 6.1.9.6.

Summary The following vulnerabilities that can affect IBM Storage Scale System and could provide weaker than expected security are now fixed in 6.2.2.1 and 6.1.9.6. Vulnerability Details CVEID:CVE-2024-42240 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: x86/bhi:...

Linux Distros Unpatched Vulnerability : CVE-2024-42240

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, ...

Azure Linux 3.0 Security Update: kernel (CVE-2024-42240)

"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42240 advisory. - In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler du...

RHEL 9 : kernel-rt (RHSA-2024:10773)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10773 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-42240)

"The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42240 advisory. - In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler du...

CVE-2024-42240 affecting package kernel for versions less than 5.15.167.1-1

CVE-2024-42240 affecting package kernel for versions less than 5.15.167.1-1. A patched version of the package is available...

CVE-2024-42240 affecting package kernel for versions less than 6.6.43.1-7

CVE-2024-42240 affecting package kernel for versions less than 6.6.43.1-7. An upgraded version of the package is available that resolves this issue...

UBUNTU-CVE-2024-42240

In the Linux kernel, the following vulnerability has been resolved: x86/bhi: Avoid warning in DB handler due to BHI mitigation When BHI mitigation is enabled, if SYSENTER is invoked with the TF flag set then entrySYSENTERcompat uses CLEARBRANCHHISTORY and calls the clearbhbloop before the TF flag...

CVE-2024-42240

CVE-2024-42240: Linux kernel x86/bhi vulnerability where, when BHI mitigation is enabled, an entry_SYSENTER_compat() sequence could trigger a #DB handler warning due to the TF single-step bit handling. The fix changes the order to clear the TF flag before or after clearing branch history as appro...