In the Linux kernel, the following vulnerability has been resolved:
ima: Fix a potential integer overflow in ima_appraise_measurement
When the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be negative, which may cause the integer overflow problem.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-toolsUpgrade rvUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-64k-coreUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64kUpgrade perfUpgrade kernel-rt-64kUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debugUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-develUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-coreUpgrade rtlaUpgrade kernel-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-devel | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.135-122.509Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.57-29.131Upgrade bpftoolUpgrade kernel-tools-devel | May 22, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel | Jun 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Jun 11, 2025 | Feb 26, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade kernel-uki-virtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade libperf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perf-debuginfo | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-raspiUpgrade linux-raspi-5.4Upgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-gkeUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-aws-5.15Upgrade linux-riscv-5.15Upgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-intel-iotgUpgrade linuxUpgrade linux-kvmUpgrade linux-oracle-5.15Upgrade linux-hwe-5.4Upgrade linux-ibm-5.4Upgrade linux-azure-5.15Upgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-oracleUpgrade linux-azure-5.4Upgrade linux-iotUpgrade linux-gcpUpgrade linux-nvidiaUpgrade linux-gcp-fipsUpgrade linux-aws-fips | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub