In the Linux kernel, the following vulnerability has been resolved:
isofs: Fix out of bound access for corrupted isofs image
When isofs image is suitably corrupted isofs_read_inode() can read data beyond the end of buffer. Sanity-check the directory entry length before using it.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.256-197.484Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-headersUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade perf-debuginfo | May 21, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Oct 8, 2024 | May 22, 2024 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-azure-baseUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade dtb-amazonUpgrade cluster-md-kmp-rtUpgrade dtb-broadcomUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-docsUpgrade dtb-amdUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-debugUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-preempt-develUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-azureUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-preemptUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-alteraUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-apmUpgrade dtb-qcomUpgrade kernel-default-manUpgrade dtb-rockchipUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade dtb-renesas | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-raspiUpgrade linux-azure-5.4Upgrade linux-azure-4.15Upgrade linux-hweUpgrade linux-ibm-5.4Upgrade linux-gcp-4.15Upgrade linux-aws-5.4Upgrade linux-gcp-fipsUpgrade linux-azure-fipsUpgrade linuxUpgrade linux-azure-fde-5.15Upgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-gkeopUpgrade linux-raspi-5.4Upgrade linux-azureUpgrade linux-oracleUpgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-fipsUpgrade linux-ibm | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub