In the Linux kernel, the following vulnerability has been resolved:
mm/mempolicy: fix get_nodes out of bound access
When user specified more nodes than supported, get_nodes will access nmask array out of bounds.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.69-37.134Upgrade bpftoolUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Jun 20, 2025 | Jun 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Ubuntu | — | Upgrade linux-gcp-5.15Upgrade linux-gkeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azureUpgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-awsUpgrade linux-riscv-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-raspiUpgrade linux-aws-5.15Upgrade linux-hwe-5.15Upgrade linux-gkeopUpgrade linux-oracleUpgrade linux-lowlatencyUpgrade linux-nvidiaUpgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linuxUpgrade linux-azure-5.15Upgrade linux-kvm | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub