In the Linux kernel, the following vulnerability has been resolved:
ima: Fix a potential integer overflow in ima_appraise_measurement
When the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be negative, which may cause the integer overflow problem.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-modules-extraUpgrade kernel-64kUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64kUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perfUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debugUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade libperfUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade perfUpgrade kernel-64k-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-debug-devel-matchedUpgrade rvUpgrade kernel-64k-coreUpgrade kernel-toolsUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-modulesUpgrade kernel-coreUpgrade kernel-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-develUpgrade kernel-debug-develUpgrade kernel-rt-modules-coreUpgrade rtlaUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-docUpgrade kernel-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-64k-modules-coreUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-devel | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.57-29.131Upgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.135-122.509Upgrade python-perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | May 22, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Jun 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Jun 11, 2025 | Feb 26, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade perfUpgrade rvUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade libperf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-modules-coreUpgrade perf-debuginfoUpgrade kernel-modulesUpgrade kernel-uki-virt-addonsUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade libperfUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extra | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-nvidiaUpgrade linux-intel-iotgUpgrade linuxUpgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-iotUpgrade linux-ibm-5.4Upgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-lowlatencyUpgrade linux-aws-5.4Upgrade linux-awsUpgrade linux-aws-5.15Upgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-oracle-5.4Upgrade linux-gkeUpgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-raspi-5.4 | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub