In the Linux kernel, the following vulnerability has been resolved:
ima: Fix a potential integer overflow in ima_appraise_measurement
When the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be negative, which may cause the integer overflow problem.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-docUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-modules-coreUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-64k-debug-develUpgrade kernel-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-64k-develUpgrade kernel-rt-64k-develUpgrade kernel-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64kUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade rvUpgrade kernel-64k-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade libperfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernelUpgrade kernel-rt-64kUpgrade kernel-64k-debugUpgrade kernel-rt-64k-modulesUpgrade kernel-rtUpgrade python3-perf | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.135-122.509Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernelUpgrade kernel-livepatch-5.15.57-29.131Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64 | May 22, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jun 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Jun 11, 2025 | Feb 26, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-debug-debuginfoUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade libperf-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-debuginfo-common-s390xUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-debug-develUpgrade rtlaUpgrade python3-perfUpgrade kernel-tools-debuginfo | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-raspiUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-realtimeUpgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-gkeUpgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-gcp-5.15Upgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-ibmUpgrade linux-oracleUpgrade linux-intel-iotgUpgrade linux-iotUpgrade linux-nvidiaUpgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-ibm-5.4Upgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-azure-fipsUpgrade linuxUpgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linux-gcp-5.4Upgrade linux-intel-iotg-5.15 | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub