In the Linux kernel, the following vulnerability has been resolved:
ftruncate: pass a signed offset
The old ftruncate() syscall, using the 32-bit off_t misses a sign extension when called in compat mode on 64-bit architectures. As a result, passing a negative length accidentally succeeds in truncating to file size between 2GiB and 4GiB.
Changing the type of the compat syscall to the signed compat_off_t changes the behavior so it instead returns -EINVAL.
The native entry point, the truncate() syscall and the corresponding loff_t based variants are all correct already and do not suffer from this mistake.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-develUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-coreUpgrade kernel-rt-kvm | Sep 26, 2024 | Jul 29, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-livepatch-4.14.352-267.564Upgrade kernel-livepatch-5.15.162-107.160Upgrade kernelUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.223-211.872 | Mar 14, 2025 | Jul 29, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-livepatch-6.1.97-104.177Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernelUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-devel | Mar 27, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 7, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Nov 11, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 9, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Nov 5, 2024 | Jul 29, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Nov 11, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Oct 16, 2024 | Jul 29, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Sep 25, 2024 | Jul 29, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade bpftoolUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debug-devel | Oct 2, 2024 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1132-awsUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-oem-osp1Upgrade linux-image-raspi2Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1018-awsUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-5.4.0-195-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-awsUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-genericUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-121-genericUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-snapdragon-hwe-18.04 | Sep 13, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub