In the Linux kernel, the following vulnerability has been resolved:
f2fs: explicitly null-terminate the xattr list
When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | Feb 20, 2024 |
| Ubuntu | — | Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-27-lowlatencyUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gke-5.15Upgrade linux-image-generic-lts-xenialUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.5.0-27-generic-64kUpgrade linux-image-4.15.0-1179-azureUpgrade linux-image-5.4.0-175-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-1034-iotUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1014-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-1018-azureUpgrade linux-image-4.15.0-227-genericUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.5.0-27-lowlatency-64kUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-27-genericUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1127-azureUpgrade linux-image-6.5.0-1019-oemUpgrade linux-image-raspiUpgrade linux-image-4.4.0-1135-kvmUpgrade linux-image-6.5.0-1020-oracleUpgrade linux-image-awsUpgrade linux-image-intelUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-bluefieldUpgrade linux-image-azure-cvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1017-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-kvmUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-laptop-23.10Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-5.15.0-1060-azureUpgrade linux-image-4.4.0-1134-awsUpgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-102-genericUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1170-awsUpgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-176-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-257-lowlatencyUpgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.5.0-1020-oracle-64kUpgrade linux-image-6.5.0-1017-gcpUpgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-6.5.0-1013-laptopUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-6.5.0-1011-starfiveUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.4.0-1172-awsUpgrade linux-image-4.4.0-257-genericUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-6.5.0-1018-azure-fdeUpgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-5.15.0-1055-oracle | Mar 12, 2024 | Feb 20, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub