In the Linux kernel, the following vulnerability has been resolved:
mm/mempolicy: fix get_nodes out of bound access
When user specified more nodes than supported, get_nodes will access nmask array out of bounds.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.69-37.134Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Jun 20, 2025 | Jun 20, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Ubuntu | — | Upgrade linux-gkeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-raspiUpgrade linux-hwe-5.15Upgrade linux-gcpUpgrade linux-riscv-5.15Upgrade linux-gcp-5.15Upgrade linux-aws-5.15Upgrade linux-intel-iotgUpgrade linux-awsUpgrade linux-azureUpgrade linux-kvmUpgrade linux-ibmUpgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-azure-5.15Upgrade linux | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub