In the Linux kernel, the following vulnerability has been resolved:
binder: check offset alignment in binder_get_object()
Commit 6d98eb95b450 ("binder: avoid potential data leakage when copying txn") introduced changes to how binder objects are copied. In doing so, it unintentionally removed an offset alignment check done through calls to binder_alloc_copy_from_buffer() -> check_buffer().
These calls were replaced in binder_get_object() with copy_from_user(), so now an explicit offset alignment check is needed here. This avoids later complications when unwinding the objects gets harder.
It is worth noting this check existed prior to commit 7a67a39320df ("binder: add function to copy binder object from buffer"), likely removed due to redundancy at the time.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 8, 2024 | Apr 25, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 25, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04bUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-20.04dUpgrade linux-image-intelUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1023-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1023-nvidiaUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.5.0-1026-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-44-genericUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-nvidia-6.5Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.5.0-1024-azure-fdeUpgrade linux-image-gkeop-5.15Upgrade linux-image-awsUpgrade linux-image-6.5.0-1027-oemUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-44-generic-64kUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-6.5.0-1024-gcpUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.5.0-1026-oracle-64kUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.5.0-44-lowlatency-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-raspi2Upgrade linux-image-6.5.0-1017-starfiveUpgrade linux-image-gke-5.15Upgrade linux-image-6.5.0-1023-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.5.0-44-lowlatencyUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-oemUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-6.5.0-1020-raspiUpgrade linux-image-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-virtualUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.5.0-1024-azureUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-gkeop | Jul 12, 2024 | Apr 25, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Apr 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub