In the Linux kernel, the following vulnerability has been resolved:
crypto: xts - Handle EBUSY correctly
As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request.
However, as the caller of xts may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64kUpgrade kernel-tools-libs-develUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-64k-modulesUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64kUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-kvmUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-modulesUpgrade rtlaUpgrade kernel-64k-develUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-headersUpgrade perfUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-kvmUpgrade libperfUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-debug | Nov 10, 2025 | Nov 3, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.19-30.43Upgrade perf-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfo | Oct 16, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 5, 2025 | Oct 1, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 4, 2025 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-nvidiaUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-intel-iot-realtimeUpgrade linuxUpgrade linux-ibmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-azureUpgrade linux-fipsUpgrade linux-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-gkeUpgrade linux-raspiUpgrade linux-riscv-5.15Upgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-azure-fdeUpgrade linux-realtimeUpgrade linux-aws-5.15Upgrade linux-nvidia-tegraUpgrade linux-lowlatency | Oct 10, 2025 | Oct 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 1, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub