In the Linux kernel, the following vulnerability has been resolved:
efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
Observed on kernel 6.6 (present on master as well):
BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe8/0x190 __asan_loadN+0x1c/0x28 memcmp+0x98/0xd0 efivarfs_d_compare+0x68/0xd8 __d_lookup_rcu_op_compare+0x178/0x218 __d_lookup_rcu+0x1f8/0x228 d_alloc_parallel+0x150/0x648 lookup_open.isra.0+0x5f0/0x8d0 open_last_lookups+0x264/0x828 path_openat+0x130/0x3f8 do_filp_open+0x114/0x248 do_sys_openat2+0x340/0x3c0 __arm64_sys_openat+0x120/0x1a0
If dentry->d_name.len < EFI_VARIABLE_GUID_LEN , 'guid' can become negative, leadings to oob. The issue can be triggered by parallel lookups using invalid filename:
T1 T2 lookup_open ->lookup simple_lookup d_add // invalid dentry is added to hash list
lookup_open d_alloc_parallel __d_lookup_rcu __d_lookup_rcu_op_compare hlist_bl_for_each_entry_rcu // invalid dentry can be retrieved ->d_compare efivarfs_d_compare // oob
Fix it by checking 'guid' before cmp.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64kUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-headersUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernel-64k-devel-matchedUpgrade kernelUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-modulesUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade bpftoolUpgrade kernel-debug-modulesUpgrade rvUpgrade kernel-debug-develUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-64kUpgrade kernel-64k-develUpgrade kernel-modulesUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade rtla | Oct 23, 2025 | Oct 20, 2025 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.191-132.213Upgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-develUpgrade kernel6.12Upgrade kernel6.12-tools-develUpgrade bpftool6.12-debuginfoUpgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel6.12-headersUpgrade kernel-livepatch-6.1.150-174.273Upgrade kernel6.12-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-libbpf-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade python3-perf6.12-debuginfoUpgrade perfUpgrade kernel6.12-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpfUpgrade kernel-livepatch-6.12.46-66.121 | Sep 30, 2025 | Sep 16, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Feb 3, 2026 | Jan 30, 2026 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Oct 14, 2025 | Sep 16, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Oct 21, 2025 | Sep 16, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade libperf-debuginfoUpgrade kernel-rt-debug-develUpgrade rvUpgrade kernel-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade bpftoolUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade rtlaUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debuginfoUpgrade python3-perfUpgrade libperfUpgrade kernel-debug-devel | Feb 5, 2026 | Nov 2, 2025 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-azure-fips-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegraUpgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-oracleUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-intelUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-ibmUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-intel-iotgUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-generic-64k-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-virtual-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-genericUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-oracle-lts-24.04 | Dec 5, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub