In the Linux kernel, the following vulnerability has been resolved:
block: Fix WARNING in _copy_from_iter
Syzkaller reports a warning in _copy_from_iter because an iov_iter is supposedly used in the wrong direction. The reason is that syzcaller managed to generate a request with a transfer direction of SG_DXFER_TO_FROM_DEV. This instructs the kernel to copy user buffers into the kernel, read into the copied buffers and then copy the data back to user space.
Thus the iovec is used in both directions.
Detect this situation in the block layer and construct a new iterator with the correct direction for the copy-in.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernelUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade dtb-exynosUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-source-azureUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade dtb-appleUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade kernel-rt_debugUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade kernel-default | Jun 24, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub