In the Linux kernel, the following vulnerability has been resolved:
block: Fix wrong offset in bio_truncate()
bio_truncate() clears the buffer outside of last block of bdev, however current bio_truncate() is using the wrong offset of page. So it can return the uninitialized data.
This happened when both of truncated/corrupted FS and userspace (via bdev) are trying to read the last of bdev.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-abi-stablelistsUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade python3-perfUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-rt-modules-extra | Aug 12, 2024 | Jun 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.10.96-90.460Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade python-perf | Aug 2, 2024 | Jun 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Oct 8, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 9, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Oct 8, 2024 | Jun 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 20, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 12, 2024 | Jun 20, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-headersUpgrade kernel-debugUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade perf | Aug 22, 2024 | Jun 20, 2024 |
| Suse | — | Upgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-preemptUpgrade kernel-source-rtUpgrade kernel-preempt-develUpgrade kernel-default-develUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rt | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-iotUpgrade linux-oracle-5.4Upgrade linux-bluefieldUpgrade linux-kvmUpgrade linux-fipsUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-azure-5.4Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-azure-fde-5.15Upgrade linux-gcpUpgrade linux-ibm-5.4Upgrade linux-ibmUpgrade linux-aws-fips | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub