In the Linux kernel, the following vulnerability has been resolved:
fs: fix UAF/GPF bug in nilfs_mdt_destroy
In alloc_inode, inode_init_always() could return -ENOMEM if security_inode_alloc() fails, which causes inode->i_private uninitialized. Then nilfs_is_metadata_file_inode() returns true and nilfs_free_inode() wrongly calls nilfs_mdt_destroy(), which frees the uninitialized inode->i_private and leads to crashes(e.g., UAF/GPF).
Fix this by moving security_inode_alloc just prior to this_cpu_inc(nr_inodes)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debug-modulesUpgrade rvUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64kUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-rtUpgrade libperfUpgrade kernel-rt-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64kUpgrade kernel-64k-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-develUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade rtlaUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade kernelUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-debug-uki-virtUpgrade perfUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules | Nov 10, 2025 | Nov 3, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.149-133.644Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade perfUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.73-48.135Upgrade kernel-livepatch-4.14.296-222.539Upgrade kernel-tools-develUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Sep 19, 2025 | Sep 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 5, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Nov 4, 2025 | Sep 17, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo | Feb 5, 2026 | Nov 13, 2025 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-iotUpgrade linux-gcp-5.15Upgrade linux-aws-5.15Upgrade linux-realtimeUpgrade linux-hwe-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linuxUpgrade linux-intel-iotg-5.15Upgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-azure-4.15Upgrade linux-hweUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-azureUpgrade linux-aws-hweUpgrade linux-awsUpgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-gkeUpgrade linux-fipsUpgrade linux-raspi-5.4Upgrade linux-oracle-5.4Upgrade linux-intel-iotgUpgrade linux-kvmUpgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-riscv-5.15Upgrade linux-gcp-5.4Upgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-ibm-5.4 | Sep 26, 2025 | Sep 17, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub