The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: Fix slab-out-of-bounds in r_page
When PAGE_SIZE is 64K, if read_log_page is called by log_read_rst for the first time, the size of *buffer would be equal to DefaultLogPageSize(4K).But for *buffer operations like memcpy, if the memory area size(n) which being assigned to buffer is larger than 4K (log->page_size(64K) or bytes(64K-page_off)), it will cause an out of boundary error. Call trace: [...] kasan_report+0x44/0x130 check_memory_region+0xf8/0x1a0 memcpy+0xc8/0x100 ntfs_read_run_nb+0x20c/0x460 read_log_page+0xd0/0x1f4 log_read_rst+0x110/0x75c log_replay+0x1e8/0x4aa0 ntfs_loadlog_and_replay+0x290/0x2d0 ntfs_fill_super+0x508/0xec0 get_tree_bdev+0x1fc/0x34c [...]
Fix this by setting variable r_page to NULL in log_read_rst.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.15.90-54.138Upgrade kernel-headersUpgrade perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-azure-fdeUpgrade linux-awsUpgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-azureUpgrade linux-bluefieldUpgrade linux-realtimeUpgrade linux-gcpUpgrade linux-intel-iotgUpgrade linux-kvmUpgrade linux-gcp-5.15Upgrade linux-azure-5.15Upgrade linux-gkeUpgrade linux-ibmUpgrade linux-riscv-5.15Upgrade linux-aws-5.15Upgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-oracle-5.15Upgrade linux-raspiUpgrade linux-oracleUpgrade linux-intel-iotg-5.15Upgrade linux-lowlatencyUpgrade linux-hwe-5.15 | Jan 6, 2026 | Jan 2, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub