In the Linux kernel, the following vulnerability has been resolved:
cdrom: rearrange last_media_change check to avoid unintentional overflow
When running syzkaller with the newly reintroduced signed integer wrap sanitizer we encounter this splat:
[ 366.015950] UBSAN: signed-integer-overflow in ../drivers/cdrom/cdrom.c:2361:33 [ 366.021089] -9223372036854775808 - 346321 cannot be represented in type '__s64' (aka 'long long') [ 366.025894] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 366.027502] CPU: 5 PID: 28472 Comm: syz-executor.7 Not tainted 6.8.0-rc2-00035-gb3ef86b5a957 #1 [ 366.027512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 366.027518] Call Trace: [ 366.027523] <TASK> [ 366.027533] dump_stack_lvl+0x93/0xd0 [ 366.027899] handle_overflow+0x171/0x1b0 [ 366.038787] ata1.00: invalid multi_count 32 ignored [ 366.043924] cdrom_ioctl+0x2c3f/0x2d10 [ 366.063932] ? __pm_runtime_resume+0xe6/0x130 [ 366.071923] sr_block_ioctl+0x15d/0x1d0 [ 366.074624] ? __pfx_sr_block_ioctl+0x10/0x10 [ 366.077642] blkdev_ioctl+0x419/0x500 [ 366.080231] ? __pfx_blkdev_ioctl+0x10/0x10 ...
Historically, the signed integer overflow sanitizer did not work in the kernel due to its interaction with `-fwrapv` but this has since been changed [1] in the newest version of Clang. It was re-enabled in the kernel with Commit 557f8c582a9ba8ab ("ubsan: Reintroduce signed overflow sanitizer").
Let's rearrange the check to not perform any arithmetic, thus not tripping the sanitizer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfoUpgrade kernelUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Mar 10, 2025 | Jul 30, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 7, 2024 | Jul 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 30, 2024 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade kernel-obs-buildUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-default-extraUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade dtb-rockchipUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade kernel-source-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade dtb-armUpgrade dtb-lgUpgrade dtb-qcomUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-exynosUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade dtb-amazonUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-appleUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-xilinxUpgrade dtb-caviumUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-default-livepatchUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-64kb-optional | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1017-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64k | Nov 4, 2024 | Jul 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub