In the Linux kernel, the following vulnerability has been resolved:
fscrypt: destroy keyring after security_sb_delete()
fscrypt_destroy_keyring() must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landlock LSM don't get evicted until security_sb_delete(), this means that fscrypt_destroy_keyring() must be called *after* security_sb_delete().
This fixes a WARN_ON followed by a NULL dereference, only possible if Landlock was being used on encrypted files.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-5.15.106-64.140Upgrade bpftoolUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade python-perf-debuginfo | Jul 9, 2025 | May 2, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf | Jul 11, 2025 | May 2, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-azureUpgrade linux-awsUpgrade linux-gcpUpgrade linux-lowlatency-hwe-5.15Upgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-bluefieldUpgrade linux-nvidia-tegraUpgrade linux-aws-5.15Upgrade linux-ibmUpgrade linux-intel-iotgUpgrade linux-oracle-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-raspiUpgrade linux-nvidiaUpgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-gcp-5.15Upgrade linux-lowlatencyUpgrade linux-ibm-5.15Upgrade linux-gke | May 8, 2025 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub