The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
um: Fix out-of-bounds read in LDT setup
syscall_stub_data() expects the data_count parameter to be the number of longs, not bytes.
================================================================== BUG: KASAN: stack-out-of-bounds in syscall_stub_data+0x70/0xe0 Read of size 128 at addr 000000006411f6f0 by task swapper/1
CPU: 0 PID: 1 Comm: swapper Not tainted 5.18.0+ #18 Call Trace: show_stack.cold+0x166/0x2a7 __dump_stack+0x3a/0x43 dump_stack_lvl+0x1f/0x27 print_report.cold+0xdb/0xf81 kasan_report+0x119/0x1f0 kasan_check_range+0x3a3/0x440 memcpy+0x52/0x140 syscall_stub_data+0x70/0xe0 write_ldt_entry+0xac/0x190 init_new_ldt+0x515/0x960 init_new_context+0x2c4/0x4d0 mm_init.constprop.0+0x5ed/0x760 mm_alloc+0x118/0x170 0x60033f48 do_one_initcall+0x1d7/0x860 0x60003e7b kernel_init+0x6e/0x3d4 new_thread_handler+0x1e7/0x2c0
The buggy address belongs to stack of task swapper/1 and is located at offset 64 in frame: init_new_ldt+0x0/0x960
This frame has 2 objects: [32, 40) 'addr' [64, 80) 'desc' ==================================================================
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade kernel-cross-headersUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade kernel-rt | Jun 12, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | May 13, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Jun 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Jul 1, 2025 | Feb 26, 2025 |
| Oracle_linux | — | Upgrade kernel | Jun 30, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jun 11, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-coreUpgrade kernel-debug-modules | Jul 31, 2025 | Jul 29, 2025 |
| Ubuntu | — | Upgrade linux-gcp-5.15Upgrade linux-hwe-5.4Upgrade linux-oracle-5.15Upgrade linux-oracle-5.4Upgrade linux-aws-hweUpgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidiaUpgrade linux-intel-iotg-5.15Upgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-fipsUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-intel-iotgUpgrade linux-realtimeUpgrade linux-gcpUpgrade linux-bluefieldUpgrade linux-azure-5.15Upgrade linux-raspi-5.4Upgrade linux-ibmUpgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-aws-5.4Upgrade linuxUpgrade linux-ibm-5.4Upgrade linux-azureUpgrade linux-hweUpgrade linux-azure-5.4Upgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linux-iotUpgrade linux-raspiUpgrade linux-hwe-5.15Upgrade linux-azure-4.15Upgrade linux-gcp-4.15Upgrade linux-gcp-fipsUpgrade linux-azure-fips | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub