In the Linux kernel, the following vulnerability has been resolved:
fs: fix UAF/GPF bug in nilfs_mdt_destroy
In alloc_inode, inode_init_always() could return -ENOMEM if security_inode_alloc() fails, which causes inode->i_private uninitialized. Then nilfs_is_metadata_file_inode() returns true and nilfs_free_inode() wrongly calls nilfs_mdt_destroy(), which frees the uninitialized inode->i_private and leads to crashes(e.g., UAF/GPF).
Fix this by moving security_inode_alloc just prior to this_cpu_inc(nr_inodes)
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-64k-develUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade bpftoolUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-64k-modules-extraUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-modulesUpgrade libperfUpgrade rvUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade kernel-64k-coreUpgrade kernel-64k-debugUpgrade kernel-headersUpgrade kernel-64kUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64kUpgrade kernel-tools-libs-develUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-debug-develUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-modules-core | Nov 10, 2025 | Nov 3, 2025 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.296-222.539Upgrade python-perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.73-48.135Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.149-133.644 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Sep 19, 2025 | Sep 19, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 5, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 4, 2025 | Sep 17, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debuginfo | Feb 5, 2026 | Nov 13, 2025 |
| Ubuntu | — | Upgrade linux-azure-4.15Upgrade linux-gcp-4.15Upgrade linux-ibmUpgrade linux-raspiUpgrade linux-hweUpgrade linux-gkeopUpgrade linux-azureUpgrade linuxUpgrade linux-gcp-5.15Upgrade linux-oracle-5.15Upgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-aws-5.4Upgrade linux-lowlatencyUpgrade linux-azure-fipsUpgrade linux-iotUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-5.4Upgrade linux-hwe-5.15Upgrade linux-aws-hweUpgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-oracleUpgrade linux-gcp-fipsUpgrade linux-gkeUpgrade linux-aws-fipsUpgrade linux-nvidiaUpgrade linux-ibm-5.4Upgrade linux-hwe-5.4Upgrade linux-gcpUpgrade linux-raspi-5.4Upgrade linux-gcp-5.4Upgrade linux-bluefieldUpgrade linux-oracle-5.4Upgrade linux-riscv-5.15Upgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-azure-5.15 | Sep 26, 2025 | Sep 17, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 17, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub