In the Linux kernel, the following vulnerability has been resolved:
ima: Fix a potential integer overflow in ima_appraise_measurement
When the ima-modsig is enabled, the rc passed to evm_verifyxattr() may be negative, which may cause the integer overflow problem.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-64k-develUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modulesUpgrade kernel-docUpgrade kernel-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-rtUpgrade kernel-64kUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade rvUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-develUpgrade python3-perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-modules-extraUpgrade perfUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64kUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-coreUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-abi-stablelists | Nov 20, 2025 | Nov 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.57-29.131Upgrade kernelUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.135-122.509Upgrade kernel-headers | May 22, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jun 11, 2025 | Feb 26, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Jun 11, 2025 | Feb 26, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade libperf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-devel-matchedUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade libperfUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-modules-core | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-gcp-5.4Upgrade linux-azure-5.15Upgrade linux-azure-5.4Upgrade linux-oracleUpgrade linux-ibm-5.4Upgrade linux-iotUpgrade linux-oracle-5.15Upgrade linux-intel-iotgUpgrade linux-gcp-fipsUpgrade linux-kvmUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-nvidiaUpgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-ibmUpgrade linux-azure-fipsUpgrade linux-gcp-5.15Upgrade linux-lowlatencyUpgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-gkeUpgrade linux-azureUpgrade linux-riscv-5.15Upgrade linux-hwe-5.15Upgrade linux-awsUpgrade linux-azure-fdeUpgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-raspi-5.4 | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub