In the Linux kernel, the following vulnerability has been resolved:
hfs: fix slab-out-of-bounds in hfs_bnode_read()
This patch introduces is_bnode_offset_valid() method that checks the requested offset value. Also, it introduces check_and_correct_requested_length() method that checks and correct the requested length (if it is necessary). These methods are used in hfs_bnode_read(), hfs_bnode_write(), hfs_bnode_clear(), hfs_bnode_copy(), and hfs_bnode_move() with the goal to prevent the access out of allocated memory and triggering the crash.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.242-239.961Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-nvidiaUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-lgUpgrade kernel-rtUpgrade dtb-marvellUpgrade kernel-sourceUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kb | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-awsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-ibmUpgrade linux-image-gke-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-64kUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-intel-iotgUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-163-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-intelUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-genericUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-virtual-5.15Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-kvm-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-fips-5.15Upgrade linux-image-azureUpgrade linux-image-aws-fips-5.15 | Dec 5, 2025 | Sep 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub