In the Linux kernel, the following vulnerability has been resolved:
fat: fix uninitialized field in nostale filehandles
When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so the file handle is actually 12 bytes long and the last two bytes remain uninitialized. This is not great at we potentially leak uninitialized information with the handle to userspace. Properly initialize the full handle length.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bpftoolUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-rt-debug-kvm | Jun 6, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.156-102.160Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-tools | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jul 17, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 6, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jun 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-debuginfoUpgrade kernel-headersUpgrade kernel-rt-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-coreUpgrade kernel-rt-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade perf | Jun 17, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-develUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade dtb-sprdUpgrade dtb-appleUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-renesasUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade dtb-marvellUpgrade dtb-nvidiaUpgrade kernel-azure-baseUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade kernel-docsUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-syms-azure | Jun 24, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-nvidiaUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-oem-20.04Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-azure-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-oemUpgrade linux-image-awsUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-azureUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-ibmUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.15.0-1062-gke | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub