In the Linux kernel, the following vulnerability has been resolved:
ext4: remove a BUG_ON in ext4_mb_release_group_pa()
If a malicious fuzzer overwrites the ext4 superblock while it is mounted such that the s_first_data_block is set to a very large number, the calculation of the block group can underflow, and trigger a BUG_ON check. Change this to be an ext4_warning so that we don't crash the kernel.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.318-240.529Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.117-72.142Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.10.184-174.730Upgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-headersUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfo | Oct 16, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Dec 12, 2025 | Dec 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-intel-iot-realtimeUpgrade linuxUpgrade linux-bluefieldUpgrade linux-gcpUpgrade linux-azureUpgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-raspi-5.4Upgrade linux-nvidia-tegra-igxUpgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-ibm-5.4Upgrade linux-iotUpgrade linux-hwe-5.15Upgrade linux-riscv-5.15Upgrade linux-oracleUpgrade linux-nvidia-tegraUpgrade linux-aws-fipsUpgrade linux-gcp-5.15Upgrade linux-ibmUpgrade linux-nvidiaUpgrade linux-lowlatencyUpgrade linux-ibm-5.15Upgrade linux-raspiUpgrade linux-intel-iotgUpgrade linux-gkeopUpgrade linux-kvmUpgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linux-gkeUpgrade linux-fipsUpgrade linux-aws-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.4Upgrade linux-azure-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-aws-5.4Upgrade linux-azure-fde-5.15 | Oct 10, 2025 | Oct 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub