In the Linux kernel, the following vulnerability has been resolved:
ima: Fix a potential integer overflow in ima_appraise_measurement
When the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be negative, which may cause the integer overflow problem.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-coreUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64kUpgrade python3-perfUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade libperfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade rvUpgrade kernel-rt-64k-debug-modulesUpgrade perfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64kUpgrade kernel-64k-modulesUpgrade rtlaUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-headersUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-develUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-modules-core | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-5.15.57-29.131Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.135-122.509Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-devel | May 22, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libs | Jun 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Jun 11, 2025 | Feb 26, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade libperf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-modules-core | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linuxUpgrade linux-oracleUpgrade linux-ibm-5.4Upgrade linux-ibmUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linux-azure-5.4Upgrade linux-gcpUpgrade linux-azure-fipsUpgrade linux-oracle-5.15Upgrade linux-kvmUpgrade linux-nvidiaUpgrade linux-intel-iotgUpgrade linux-iotUpgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-hwe-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-realtimeUpgrade linux-gkeUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-lowlatencyUpgrade linux-gcp-5.15Upgrade linux-riscv-5.15Upgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-aws-5.15Upgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-azure | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub