In the Linux kernel, the following vulnerability has been resolved:
fat: fix uninitialized field in nostale filehandles
When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so the file handle is actually 12 bytes long and the last two bytes remain uninitialized. This is not great at we potentially leak uninitialized information with the handle to userspace. Properly initialize the full handle length.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade perfUpgrade kernelUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-devel | Jun 6, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.156-102.160Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.345-262.561Upgrade bpftoolUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-tools-devel | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.84-99.169 | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jul 17, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 6, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perfUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel | Jun 17, 2024 | May 1, 2024 |
| Suse | — | Upgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-azureUpgrade dtb-amdUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-azure-baseUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade dtb-amazonUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-symsUpgrade kernel-kvmsmall-devel | Jun 24, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.15Upgrade linux-image-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-189-genericUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-oemUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-6.8.0-1006-ibmUpgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-5.4.0-1128-awsUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-genericUpgrade linux-image-6.8.0-1008-azureUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-intelUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-raspi2Upgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-generic-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-5.15.0-1065-awsUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-20.04 | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub