In the Linux kernel, the following vulnerability has been resolved:
block: Fix WARNING in _copy_from_iter
Syzkaller reports a warning in _copy_from_iter because an iov_iter is supposedly used in the wrong direction. The reason is that syzcaller managed to generate a request with a transfer direction of SG_DXFER_TO_FROM_DEV. This instructs the kernel to copy user buffers into the kernel, read into the copied buffers and then copy the data back to user space.
Thus the iovec is used in both directions.
Detect this situation in the block layer and construct a new iterator with the correct direction for the copy-in.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfo | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade dtb-alteraUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-docsUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade dtb-nvidiaUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-rt-livepatch-develUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade dtb-armUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-debugUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-default | Jun 24, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub