In the Linux kernel, the following vulnerability has been resolved:
loop: loop_set_status_from_info() check before assignment
In loop_set_status_from_info(), lo->lo_offset and lo->lo_sizelimit should be checked before reassignment, because if an overflow error occurs, the original correct value will be changed to the wrong value, and it will not be changed back.
More, the original patch did not solve the problem, the value was set and ioctl returned an error, but the subsequent io used the value in the loop driver, which still caused an alarm:
loop_handle_cmd do_req_filebacked loff_t pos = ((loff_t) blk_rq_pos(rq) << 9) + lo->lo_offset; lo_rw_aio cmd->iocb.ki_pos = pos
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade perfUpgrade kernelUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.19-30.43Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Jan 12, 2026 | Dec 9, 2025 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 9, 2025 |
| Ubuntu | — | Upgrade linux-nvidia-tegraUpgrade linux-riscv-5.15Upgrade linux-raspiUpgrade linux-aws-5.15Upgrade linux-ibm-5.15Upgrade linux-realtimeUpgrade linux-hwe-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-nvidiaUpgrade linux-gkeUpgrade linux-oracle-5.4Upgrade linux-azureUpgrade linux-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-aws-5.4Upgrade linux-gcp-5.15Upgrade linux-intel-iotgUpgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-fdeUpgrade linux-intel-iotg-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-gkeopUpgrade linux-oracleUpgrade linux-raspi-5.4Upgrade linux-hwe-5.4Upgrade linux-azure-fipsUpgrade linux-intel-iot-realtimeUpgrade linux-ibmUpgrade linux-azure-5.4Upgrade linux-bluefieldUpgrade linuxUpgrade linux-ibm-5.4Upgrade linux-gcp-fipsUpgrade linux-iotUpgrade linux-awsUpgrade linux-azure-5.15Upgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-gcp-5.4 | Dec 11, 2025 | Dec 9, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub