In the Linux kernel, the following vulnerability has been resolved:
dm flakey: don't corrupt the zero page
When we need to zero some range on a block device, the function __blkdev_issue_zero_pages submits a write bio with the bio vector pointing to the zero page. If we use dm-flakey with corrupt bio writes option, it will corrupt the content of the zero page which results in crashes of various userspace programs. Glibc assumes that memory returned by mmap is zeroed and it uses it for calloc implementation; if the newly mapped memory is not zeroed, calloc will return non-zeroed memory.
Fix this bug by testing if the page is equal to ZERO_PAGE(0) and avoiding the corruption in this case.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.102-61.139Upgrade kernel-livepatch-4.14.309-231.529Upgrade kernel-develUpgrade kernelUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-5.10.173-154.642 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-headersUpgrade perf | Feb 20, 2026 | Dec 30, 2025 |
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelists | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 30, 2025 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-nvidia-tegraUpgrade linux-awsUpgrade linux-oracle-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linuxUpgrade linux-ibm-5.4Upgrade linux-bluefieldUpgrade linux-gkeUpgrade linux-raspiUpgrade linux-intel-iot-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.4Upgrade linux-aws-5.15Upgrade linux-gkeopUpgrade linux-aws-fipsUpgrade linux-gcpUpgrade linux-gcp-fipsUpgrade linux-iotUpgrade linux-intel-iotgUpgrade linux-oracle-5.15Upgrade linux-fipsUpgrade linux-oracleUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-ibmUpgrade linux-azure-5.4Upgrade linux-lowlatencyUpgrade linux-riscv-5.15Upgrade linux-azure-5.15Upgrade linux-azure-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-kvmUpgrade linux-xilinx-zynqmp | Jan 6, 2026 | Jan 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub