In the Linux kernel, the following vulnerability has been resolved:
dm integrity: fix memory corruption when tag_size is less than digest size
It is possible to set up dm-integrity in such a way that the "tag_size" parameter is less than the actual digest size. In this situation, a part of the digest beyond tag_size is ignored.
In this case, dm-integrity would write beyond the end of the ic->recalc_tags array and corrupt memory. The corruption happened in integrity_recalc->integrity_sector_checksum->crypto_shash_final.
Fix this corruption by increasing the tags array so that it has enough padding at the end to accomodate the loop in integrity_recalc() being able to write a full digest size for the last member of the tags array.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.112-108.499Upgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo | Mar 14, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-headers | Jul 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelists | Jul 1, 2025 | Feb 26, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-gkeUpgrade linux-hwe-5.15Upgrade linux-azure-5.15Upgrade linux-lowlatencyUpgrade linux-awsUpgrade linuxUpgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-azure-5.4Upgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-ibm-5.4Upgrade linux-azureUpgrade linux-gcp-5.4Upgrade linux-iotUpgrade linux-aws-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-realtimeUpgrade linux-fipsUpgrade linux-bluefieldUpgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-oracle-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-oracle | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub