In the Linux kernel, the following vulnerability has been resolved:
block: initialize integrity buffer to zero before writing it to media
Metadata added by bio_integrity_prep is using plain kmalloc, which leads to random kernel memory being written media. For PI metadata this is limited to the app tag that isn't used by kernel generated metadata, but for non-PI metadata the entire buffer leaks kernel memory.
Fix this by adding the __GFP_ZERO flag to allocations for writes.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-uki-virtUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-develUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-64kUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-64k-coreUpgrade rtlaUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-uki-virt-addonsUpgrade kernel-docUpgrade perfUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-devel | Nov 4, 2024 | Aug 17, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.226-214.879Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-4.14.355-271.569Upgrade bpftoolUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-5.15.165-110.161Upgrade kernel-tools-develUpgrade perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.106-116.188Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade python3-perf | Oct 16, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Dec 12, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Nov 11, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 6, 2024 | Aug 17, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-uki-virtUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-devel-matchedUpgrade libperf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdumpUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules | Nov 19, 2024 | Aug 17, 2024 |
| Suse | — | Upgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-azure-optionalUpgrade kernel-kvmsmallUpgrade dtb-amazonUpgrade dtb-caviumUpgrade kernel-azure-baseUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade dtb-freescaleUpgrade kernel-default-manUpgrade kernel-source-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade kernel-rtUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade dtb-apmUpgrade kernel-docsUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-rt-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-rtUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade cluster-md-kmp-default | Dec 5, 2025 | Dec 12, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-6.8Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-intelUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1140-azureUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-4.15.0-1183-azureUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-4.15.0-1175-awsUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.4.0-1044-iotUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-oracleUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-4.4.0-1179-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-4.4.0-266-genericUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-4.15.0-1137-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-4.4.0-266-lowlatencyUpgrade linux-image-4.4.0-1142-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1158-kvmUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-4.15.0-231-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-azure-lts-18.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-4.4.0-1141-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-4.15.0-231-genericUpgrade linux-image-4.15.0-1168-gcpUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-lowlatency-hwe-16.04 | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub