A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.15.128-80.144Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-livepatch-5.10.192-182.736Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-develUpgrade python-perf | Sep 7, 2023 | Aug 9, 2023 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.49-69.116Upgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-develUpgrade python3-perf-debuginfo | Feb 17, 2025 | Jul 13, 2023 |
| Centos_linux | — | Upgrade kernel | Nov 8, 2023 | Aug 9, 2023 |
| Debian | — | Upgrade linux | Aug 21, 2023 | Aug 9, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jan 10, 2024 | Aug 9, 2023 |
| Oracle_linux | — | Upgrade kernel | Nov 16, 2023 | Jul 13, 2023 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 8, 2023 | Aug 9, 2023 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade dtb-marvellUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade kernel-azureUpgrade dtb-zteUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade kernel-defaultUpgrade kernel-sourceUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade reiserfs-kmp-64kbUpgrade dtb-alUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-freescaleUpgrade dtb-apmUpgrade dtb-allwinnerUpgrade dtb-appleUpgrade dtb-armUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade ocfs2-kmp-rtUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade kernel-preempt-develUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-source-azureUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-rt-livepatchUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade cluster-md-kmp-rt | Sep 15, 2023 | Aug 9, 2023 |
| Ubuntu | — | Upgrade linux-image-intelUpgrade linux-image-6.2.0-1014-lowlatencyUpgrade linux-image-nvidia-6.2Upgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.2.0-1014-kvmUpgrade linux-image-5.15.0-1049-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1030-gkeopUpgrade linux-image-ibmUpgrade linux-image-6.2.0-34-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.2.0-1011-nvidiaUpgrade linux-image-5.15.0-86-lowlatency-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-86-genericUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-86-generic-64kUpgrade linux-image-starfiveUpgrade linux-image-intel-iotgUpgrade linux-image-6.1.0-1021-oemUpgrade linux-image-5.15.0-1047-awsUpgrade linux-image-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.2.0-1014-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-86-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1040-ibmUpgrade linux-image-6.2.0-1006-starfiveUpgrade linux-image-5.15.0-1045-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.2.0-1014-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1037-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.2.0-1014-azure-fdeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1037-nvidiaUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.2.0-1014-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-64k-6.2Upgrade linux-image-6.2.0-34-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-5.15.0-1043-intel-iotgUpgrade linux-image-6.0.0-1021-oemUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.2.0-1013-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1044-gcpUpgrade linux-image-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.2.0-34-genericUpgrade linux-image-6.2.0-1016-gcpUpgrade linux-image-5.15.0-1044-kvmUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1040-raspiUpgrade linux-image-5.15.0-1044-gkeUpgrade linux-image-5.15.0-86-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.2.0-1013-awsUpgrade linux-image-6.2.0-1011-nvidia-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1049-azure-fdeUpgrade linux-image-nvidia-lowlatency | Sep 18, 2023 | Aug 9, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub