In the Linux kernel, the following vulnerability has been resolved:
crypto: xts - Handle EBUSY correctly
As it is xts only handles the special return value of EINPROGRESS, which means that in all other cases it will free data related to the request.
However, as the caller of xts may specify MAY_BACKLOG, we also need to expect EBUSY and treat it in the same way. Otherwise backlogged requests will trigger a use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rtUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-develUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-toolsUpgrade kernel-64k-develUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-devel-matchedUpgrade kernel-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-rt-debug-develUpgrade rvUpgrade kernel-64k-debug-modules-extraUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade rtlaUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-64kUpgrade kernel-64k-modulesUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-rt-64k-debug-modulesUpgrade kernelUpgrade kernel-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k | Nov 10, 2025 | Nov 3, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.102-61.139Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-livepatch-6.1.19-30.43Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | Oct 16, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Feb 3, 2026 | Feb 2, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 5, 2025 | Oct 1, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 4, 2025 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-oracle-5.15Upgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-azure-fipsUpgrade linux-nvidiaUpgrade linux-ibmUpgrade linux-gkeopUpgrade linux-intel-iotgUpgrade linux-intel-iotg-5.15Upgrade linux-aws-fipsUpgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-intel-iot-realtimeUpgrade linuxUpgrade linux-kvmUpgrade linux-lowlatencyUpgrade linux-bluefieldUpgrade linux-hwe-5.15Upgrade linux-fipsUpgrade linux-aws-5.15Upgrade linux-gkeUpgrade linux-riscv-5.15Upgrade linux-raspiUpgrade linux-azureUpgrade linux-gcp-5.15Upgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegra | Oct 10, 2025 | Oct 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub