In the Linux kernel, the following vulnerability has been resolved:
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
pefile_digest_pe_contents() computes the trailing-data hash length as pelen - (hashed_bytes + certs_size). A crafted PE can make the addition exceed pelen, causing the unsigned subtraction to underflow to ~4 GiB. This is passed to crypto_shash_update() which reads out of bounds and panics on unmapped vmalloc guard pages.
BUG: unable to handle page fault for address: ffffc900038d8000 Oops: Oops: 0000 [#1] SMP KASAN NOPTI RIP: 0010:sha256_blocks_generic (lib/crypto/sha256.c:152) Call Trace: <TASK> __sha256_update (lib/crypto/sha256.c:208) crypto_sha256_update (crypto/sha256.c:142) verify_pefile_signature (crypto/asymmetric_keys/verify_pefile.c:436) kexec_kernel_verify_pe_sig (kernel/kexec_file.c:151) __do_sys_kexec_file_load (kernel/kexec_file.c:406) do_syscall_64 (arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) </TASK> Kernel panic - not syncing: Fatal exception
Validate that the addition does not overflow and the result does not exceed pelen before the subtraction. Return -ELIBBAD on failure.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.100-125.179Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel6.12-develUpgrade python3-perf-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.180-225.360Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-headersUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernelUpgrade perf6.12-debuginfoUpgrade kernel-headersUpgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-develUpgrade kernel-modules-extra-commonUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade kernel-debuginfoUpgrade bpftool6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-toolsUpgrade bpftool6.12Upgrade python3-perf6.12-debuginfo | Aug 18, 2026 | Jul 27, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux-6.1Upgrade linux | Aug 2, 2026 | Aug 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 30, 2026 | Jul 27, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 14, 2026 | Jul 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub