In the Linux kernel, the following vulnerability has been resolved:
ring-buffer: Fix possible dereference of uninitialized pointer
There is a pointer head_page in rb_meta_validate_events() which is not initialized at the beginning of a function. This pointer can be dereferenced if there is a failure during reader page validation. In this case the control is passed to "invalid" label where the pointer is dereferenced in a loop.
To fix the issue initialize orig_head and head_page before calling rb_validate_buffer.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-libbpfUpgrade kernel6.18-debuginfoUpgrade kernel-livepatch-6.18.16-18.222Upgrade kernel6.18-toolsUpgrade kernel6.18-libbpf-develUpgrade kernel6.18-debuginfo-common-aarch64Upgrade perf6.18-debuginfoUpgrade kernel6.18-headersUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-libbpf-staticUpgrade perf6.18Upgrade kernel6.18Upgrade python3-perf6.18Upgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-tools-develUpgrade kernel6.18-develUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-modules-extraUpgrade bpftool6.18 | May 19, 2026 | May 6, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub