In the Linux kernel, the following vulnerability has been resolved:
block: Fix wrong offset in bio_truncate()
bio_truncate() clears the buffer outside of last block of bdev, however current bio_truncate() is using the wrong offset of page. So it can return the uninitialized data.
This happened when both of truncated/corrupted FS and userspace (via bdev) are trying to read the last of bdev.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-docUpgrade kernel-headersUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade bpftoolUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-rt-kvm | Aug 12, 2024 | Jun 20, 2024 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.96-90.460Upgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Aug 2, 2024 | Jun 20, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Oct 9, 2024 | Jun 20, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Oct 8, 2024 | Jun 20, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 20, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 12, 2024 | Jun 20, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-debug | Aug 22, 2024 | Jun 20, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-macrosUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-develUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade kernel-preemptUpgrade kernel-zfcpdumpUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-source-rtUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azure | Aug 9, 2024 | Jun 20, 2024 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-aws-fipsUpgrade linux-ibm-5.4Upgrade linux-azure-fde-5.15Upgrade linux-gcp-fipsUpgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-gcpUpgrade linuxUpgrade linux-azureUpgrade linux-raspi-5.4Upgrade linux-oracle-5.4Upgrade linux-iotUpgrade linux-fipsUpgrade linux-kvmUpgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-raspiUpgrade linux-aws | Nov 19, 2024 | Jun 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jun 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub