In the Linux kernel, the following vulnerability has been resolved:
fat: fix uninitialized field in nostale filehandles
When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so the file handle is actually 12 bytes long and the last two bytes remain uninitialized. This is not great at we potentially leak uninitialized information with the handle to userspace. Properly initialize the full handle length.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-develUpgrade perfUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-headers | Jun 6, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.156-102.160Upgrade kernel | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-libbpfUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-modules-extra-common | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jun 6, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jun 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade perfUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade perf-debuginfoUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade kernel-cross-headers | Jun 17, 2024 | May 1, 2024 |
| Suse | — | Upgrade dtb-broadcomUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade kernel-develUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-rt_debug-develUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-azure-extraUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-azure-baseUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade kernel-source-rtUpgrade dtb-appleUpgrade dtb-exynosUpgrade kernel-default-baseUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade kernel-rt-extraUpgrade dtb-marvellUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade dtb-hisiliconUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-devel-rtUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kselftests-kmp-rtUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-develUpgrade gfs2-kmp-rt | Jun 24, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-6.8.0-1006-oemUpgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-raspi2Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1040-iotUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-116-genericUpgrade linux-image-virtualUpgrade linux-image-intelUpgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-oem-24.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-gkeUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-oemUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-5.15.0-1060-nvidia | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub