In the Linux kernel, the following vulnerability has been resolved:
block: Fix WARNING in _copy_from_iter
Syzkaller reports a warning in _copy_from_iter because an iov_iter is supposedly used in the wrong direction. The reason is that syzcaller managed to generate a request with a transfer direction of SG_DXFER_TO_FROM_DEV. This instructs the kernel to copy user buffers into the kernel, read into the copied buffers and then copy the data back to user space.
Thus the iovec is used in both directions.
Detect this situation in the block layer and construct a new iterator with the correct direction for the copy-in.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.82-99.168Upgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade dtb-amdUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kernel-azure-vdsoUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade dtb-appleUpgrade dtb-exynosUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-default-optionalUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade dlm-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade kernel-azureUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug | Jun 24, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub