In the Linux kernel, the following vulnerability has been resolved:
fat: fix uninitialized field in nostale filehandles
When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so the file handle is actually 12 bytes long and the last two bytes remain uninitialized. This is not great at we potentially leak uninitialized information with the handle to userspace. Properly initialize the full handle length.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade perfUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-debugUpgrade kernel-debug-modules | Jun 6, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.345-262.561Upgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.156-102.160Upgrade kernel-headers | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade perfUpgrade python3-perfUpgrade kernel-modules-extra-common | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 17, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 6, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jun 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade perfUpgrade python3-perfUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-debuginfoUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade python3-perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-libs-devel | Jun 17, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-rtUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-sourceUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-develUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade dtb-exynosUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade dtb-renesasUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rt-extraUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuild | Jun 24, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-genericUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-raspi2Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-bluefieldUpgrade linux-image-ibm-classicUpgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-azure-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-intelUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-awsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-oracle-lts-20.04 | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub