In the Linux kernel, the following vulnerability has been resolved:
block: Fix WARNING in _copy_from_iter
Syzkaller reports a warning in _copy_from_iter because an iov_iter is supposedly used in the wrong direction. The reason is that syzcaller managed to generate a request with a transfer direction of SG_DXFER_TO_FROM_DEV. This instructs the kernel to copy user buffers into the kernel, read into the copied buffers and then copy the data back to user space.
Thus the iovec is used in both directions.
Detect this situation in the block layer and construct a new iterator with the correct direction for the copy-in.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-modules-extra-common | Feb 17, 2025 | Apr 17, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Apr 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade dtb-marvellUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade dtb-amdUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade kernel-debug-livepatch-develUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-apmUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-devel | Jun 24, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub