In the Linux kernel, the following vulnerability has been resolved:
xfs: fix log recovery buffer allocation for the legacy h_size fixup
Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer.
Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-rt-develUpgrade rtlaUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade kernel-rt-kvmUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-rt-modules-extraUpgrade kernel-uki-virtUpgrade bpftoolUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-64k-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade rvUpgrade kernel-rt-debug-develUpgrade kernel-64kUpgrade libperfUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-64k-coreUpgrade kernel-modules-coreUpgrade kernel-toolsUpgrade kernel-64k-debug | Aug 12, 2024 | Jul 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-livepatch-5.15.165-110.161Upgrade kernelUpgrade kernel-toolsUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perf | May 22, 2025 | Jul 5, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python3-perf-debuginfoUpgrade python3-perf | Jun 11, 2025 | Jul 5, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Oct 9, 2024 | Jul 5, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 16, 2024 | Jul 5, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Aug 12, 2024 | Jul 5, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-debuginfo-common-x86_64Upgrade rvUpgrade kernel-debug-modules-coreUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debugUpgrade bpftool-debuginfoUpgrade rtlaUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-cross-headersUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-coreUpgrade libperfUpgrade perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-devel | Aug 22, 2024 | Jul 5, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-syms-rtUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-docsUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade kernel-64kb-extraUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade dtb-armUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade kernel-rtUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade dtb-exynosUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade dtb-lgUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade gfs2-kmp-rt | Aug 8, 2024 | Jul 5, 2024 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-intelUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azureUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04 | Nov 12, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub