In the Linux kernel, the following vulnerability has been resolved:
ima: Fix a potential integer overflow in ima_appraise_measurement
When the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be negative, which may cause the integer overflow problem.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-cross-headersUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64kUpgrade python3-perfUpgrade kernelUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debug-coreUpgrade perfUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade kernel-64k-coreUpgrade kernel-64kUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rtUpgrade rvUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-modules-coreUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-devel | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.135-122.509Upgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-5.15.57-29.131 | May 22, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel | Jun 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Jun 11, 2025 | Feb 26, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 26, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade libperf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-uki-virt-addonsUpgrade python3-perf-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-core | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-aws-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-ibm-5.4Upgrade linux-azure-5.4Upgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-gcpUpgrade linux-oracleUpgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-nvidiaUpgrade linux-iotUpgrade linux-azure-fipsUpgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linux-raspi-5.4Upgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-lowlatencyUpgrade linux-oracle-5.4Upgrade linux-gkeUpgrade linux-aws-5.4Upgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-awsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-riscv-5.15Upgrade linux-raspi | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub