In the Linux kernel, the following vulnerability has been resolved:
isofs: Fix out of bound access for corrupted isofs image
When isofs image is suitably corrupted isofs_read_inode() can read data beyond the end of buffer. Sanity-check the directory entry length before using it.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-livepatch-4.14.256-197.484Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade perf-debuginfo | May 21, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 22, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade kernel-rt-extraUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade dtb-lgUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-apmUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-preemptUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt-develUpgrade dtb-amdUpgrade kernel-64kbUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade dtb-caviumUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade dtb-freescaleUpgrade kernel-azureUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-preempt-develUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-rt_debug-develUpgrade kernel-debugUpgrade dtb-socionextUpgrade dtb-hisiliconUpgrade kernel-default-optionalUpgrade kernel-azure-base | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-aws-5.4Upgrade linux-gcp-4.15Upgrade linux-awsUpgrade linux-raspiUpgrade linuxUpgrade linux-azure-fipsUpgrade linux-azure-5.4Upgrade linux-gcp-5.4Upgrade linux-ibm-5.4Upgrade linux-hweUpgrade linux-azure-4.15Upgrade linux-bluefieldUpgrade linux-gkeopUpgrade linux-azure-fde-5.15Upgrade linux-aws-fipsUpgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-azureUpgrade linux-fipsUpgrade linux-aws-hweUpgrade linux-oracleUpgrade linux-oracle-5.4Upgrade linux-kvmUpgrade linux-ibm | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub