The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
udmabuf: validate ubuf->pagecount
Syzbot has reported GPF in sg_alloc_append_table_from_pages(). The problem was in ubuf->pages == ZERO_PTR.
ubuf->pagecount is calculated from arguments passed from user-space. If user creates udmabuf with list.size == 0 then ubuf->pagecount will be also equal to zero; it causes kmalloc_array() to return ZERO_PTR.
Fix it by validating ubuf->pagecount before passing it to kmalloc_array().
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Ubuntu | — | Upgrade linux-azure-fipsUpgrade linuxUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-ibm-5.4Upgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-intel-iotgUpgrade linux-oracle-5.4Upgrade linux-gkeUpgrade linux-gcp-fipsUpgrade linux-lowlatencyUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-iotUpgrade linux-hwe-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-fipsUpgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-azureUpgrade linux-raspiUpgrade linux-azure-5.15 | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub