The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
afs: Fix dynamic root getattr
The recent patch to make afs_getattr consult the server didn't account for the pseudo-inodes employed by the dynamic root-type afs superblock not having a volume or a server to access, and thus an oops occurs if such a directory is stat'd.
Fix this by checking to see if the vnode->volume pointer actually points anywhere before following it in afs_getattr().
This can be tested by stat'ing a directory in /afs. It may be sufficient just to do "ls /afs" and the oops looks something like:
BUG: kernel NULL pointer dereference, address: 0000000000000020 ... RIP: 0010:afs_getattr+0x8b/0x14b ... Call Trace: <TASK> vfs_statx+0x79/0xf5 vfs_fstatat+0x49/0x62
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-livepatch-5.10.130-118.517Upgrade python-perf-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.54-25.126 | May 22, 2025 | Feb 26, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Ubuntu | — | Upgrade linux-hweUpgrade linux-oracle-5.15Upgrade linux-azure-4.15Upgrade linux-aws-hweUpgrade linux-lowlatencyUpgrade linux-ibmUpgrade linux-azure-fdeUpgrade linux-aws-5.15Upgrade linux-oracleUpgrade linux-raspiUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-4.15Upgrade linux-realtimeUpgrade linux-azureUpgrade linux-kvmUpgrade linux-awsUpgrade linux-gcp-5.15Upgrade linux-gkeopUpgrade linux-gcpUpgrade linuxUpgrade linux-gkeUpgrade linux-fipsUpgrade linux-riscv-5.15Upgrade linux-azure-5.15Upgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-intel-iotg | Mar 3, 2025 | Feb 26, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub