In the Linux kernel, the following vulnerability has been resolved:
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
The "intf" list iterator is an invalid pointer if the correct "intf->intf_num" is not found. Calling atomic_dec(&intf->nr_users) on and invalid pointer will lead to memory corruption.
We don't really need to call atomic_dec() if we haven't called atomic_add_return() so update the if (intf->in_shutdown) path as well.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-headersUpgrade perf6.12Upgrade kernel6.12-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-develUpgrade kernel6.12-tools-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade bpftool6.12-debuginfoUpgrade bpftool6.12Upgrade kernel6.12-libbpfUpgrade kernel6.12-toolsUpgrade python3-perf6.12-debuginfo | Oct 16, 2025 | Jul 25, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 28, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dtb-alteraUpgrade dtb-appleUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-64kb-optionalUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-rt-vdsoUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade dtb-socionextUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade kernel-devel-azureUpgrade kernel-defaultUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kb | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-oracle-6.14Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gke-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinxUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gcp-fips-6.8 | Jul 31, 2025 | Jul 25, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub