In the Linux kernel, the following vulnerability has been resolved:
ovl: Use "buf" flexible array for memcpy() destination
The "buf" flexible array needs to be the memcpy() destination to avoid false positive run-time warning from the recent FORTIFY_SOURCE hardening:
memcpy: detected field-spanning write (size 93) of single field "&fh->fb" at fs/overlayfs/export.c:799 (size 21)
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.93-55.139Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | May 22, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-livepatch-6.1.12-17.42Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade perf-debuginfo | Jun 11, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux | Mar 31, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Jun 13, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jul 21, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Ubuntu | — | Upgrade linux-gkeUpgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-awsUpgrade linux-intel-iot-realtimeUpgrade linux-aws-5.15Upgrade linuxUpgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-nvidiaUpgrade linux-ibmUpgrade linux-oracle-5.15Upgrade linux-riscv-5.15Upgrade linux-gkeopUpgrade linux-kvmUpgrade linux-azure-fde-5.15Upgrade linux-gcpUpgrade linux-realtimeUpgrade linux-lowlatencyUpgrade linux-intel-iotgUpgrade linux-gcp-5.15Upgrade linux-azureUpgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-hwe-5.15 | Apr 1, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub