In the Linux kernel, the following vulnerability has been resolved:
of: overlay: Call of_changeset_init() early
When of_overlay_fdt_apply() fails, the changeset may be partially applied, and the caller is still expected to call of_overlay_remove() to clean up this partial state.
However, of_overlay_apply() calls of_resolve_phandles() before init_overlay_changeset(). Hence if the overlay fails to apply due to an unresolved symbol, the overlay_changeset.cset.entries list is still uninitialized, and cleanup will crash with a NULL-pointer dereference in overlay_removal_is_ok().
Fix this by moving the call to of_changeset_init() from init_overlay_changeset() to of_overlay_fdt_apply(), where all other early initialization is done.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.55-75.123Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Jan 12, 2026 | Dec 9, 2025 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 9, 2025 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-raspiUpgrade linux-realtimeUpgrade linuxUpgrade linux-aws-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeUpgrade linux-awsUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-riscv-5.15Upgrade linux-lowlatencyUpgrade linux-hwe-5.15Upgrade linux-nvidia-tegraUpgrade linux-xilinx-zynqmpUpgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-azureUpgrade linux-azure-5.15Upgrade linux-oracleUpgrade linux-intel-iot-realtimeUpgrade linux-gkeopUpgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-fipsUpgrade linux-aws-fipsUpgrade linux-nvidia-tegra-igx | Dec 11, 2025 | Dec 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub