In the Linux kernel, the following vulnerability has been resolved:
crypto: xts - Handle EBUSY correctly
As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request.
However, as the caller of xts may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-rt-develUpgrade rtlaUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-64k-modules-coreUpgrade python3-perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64kUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-64k-coreUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64kUpgrade kernel-64k-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modules-extraUpgrade rvUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-modulesUpgrade libperfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-64k-modules-extraUpgrade perfUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-core | Nov 10, 2025 | Nov 3, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-livepatch-5.10.173-154.642Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-livepatch-5.15.102-61.139 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade bpftoolUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.19-30.43 | Oct 16, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 5, 2025 | Oct 1, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 4, 2025 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-intel-iot-realtimeUpgrade linux-oracleUpgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-gcp-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-gkeopUpgrade linux-nvidiaUpgrade linuxUpgrade linux-ibmUpgrade linux-azure-fipsUpgrade linux-riscv-5.15Upgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-aws-5.15Upgrade linux-azureUpgrade linux-realtimeUpgrade linux-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatencyUpgrade linux-awsUpgrade linux-nvidia-tegraUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-hwe-5.15Upgrade linux-gcp-5.15 | Oct 10, 2025 | Oct 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub