In the Linux kernel, the following vulnerability has been resolved:
ima: fix buffer overrun in ima_eventdigest_init_common
Function ima_eventdigest_init() calls ima_eventdigest_init_common() with HASH_ALGO__LAST which is then used to access the array hash_digest_size[] leading to buffer overrun. Have a conditional statement to handle this.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.1.119-129.201Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernelUpgrade kernel-libbpf-devel | Mar 27, 2025 | Dec 2, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Dec 9, 2024 | Dec 2, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-kvmUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-azure-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k | Feb 20, 2025 | Dec 2, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Dec 2, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub