In the Linux kernel, the following vulnerability has been resolved:
fscrypt: destroy keyring after security_sb_delete()
fscrypt_destroy_keyring() must be called after all potentially-encrypted inodes were evicted; otherwise it cannot safely destroy the keyring. Since inodes that are in-use by the Landlock LSM don't get evicted until security_sb_delete(), this means that fscrypt_destroy_keyring() must be called *after* security_sb_delete().
This fixes a WARN_ON followed by a NULL dereference, only possible if Landlock was being used on encrypted files.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftoolUpgrade perfUpgrade kernel-livepatch-5.15.106-64.140Upgrade bpftool-debuginfoUpgrade python-perf | Jul 9, 2025 | May 2, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade perfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.23-36.46Upgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool | Jul 11, 2025 | May 2, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-intel-iot-realtimeUpgrade linux-azureUpgrade linux-bluefieldUpgrade linux-nvidia-tegra-igxUpgrade linux-gcpUpgrade linux-awsUpgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.15Upgrade linuxUpgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-nvidiaUpgrade linux-kvmUpgrade linux-ibm-5.15Upgrade linux-gcp-5.15Upgrade linux-oracleUpgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.15Upgrade linux-raspiUpgrade linux-azure-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linux-nvidia-tegraUpgrade linux-riscv-5.15Upgrade linux-ibmUpgrade linux-intel-iotg | May 8, 2025 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub