In the Linux kernel, the following vulnerability has been resolved:
isofs: Fix out of bound access for corrupted isofs image
When isofs image is suitably corrupted isofs_read_inode() can read data beyond the end of buffer. Sanity-check the directory entry length before using it.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.82-83.359Upgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.256-197.484Upgrade kernel-headersUpgrade kernelUpgrade bpftool | May 21, 2025 | May 22, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Oct 8, 2024 | May 22, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Oct 8, 2024 | May 22, 2024 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azure-baseUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-develUpgrade dtb-caviumUpgrade kernel-debugUpgrade dtb-marvellUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-devel-rtUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-defaultUpgrade kernel-defaultUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-64kbUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade kernel-rt-extraUpgrade dtb-rockchipUpgrade kernel-default-manUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-rt-optionalUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-default-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade dtb-lgUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-kvmsmall-vdsoUpgrade kernel-preemptUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azure | Aug 9, 2024 | May 22, 2024 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-azure-fipsUpgrade linux-gcp-fipsUpgrade linux-raspiUpgrade linux-ibm-5.4Upgrade linux-aws-5.4Upgrade linux-hweUpgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-awsUpgrade linuxUpgrade linux-azure-4.15Upgrade linux-aws-hweUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-azure-fde-5.15Upgrade linux-ibmUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-oracle-5.4 | Nov 19, 2024 | May 22, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 22, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub