In the Linux kernel, the following vulnerability has been resolved:
fat: fix uninitialized field in nostale filehandles
When fat_encode_fh_nostale() encodes file handle without a parent it stores only first 10 bytes of the file handle. However the length of the file handle must be a multiple of 4 so the file handle is actually 12 bytes long and the last two bytes remain uninitialized. This is not great at we potentially leak uninitialized information with the handle to userspace. Properly initialize the full handle length.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-rt-kvmUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade perfUpgrade kernelUpgrade kernel-zfcpdumpUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade kernel-modules | Jun 6, 2024 | May 1, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-5.15.156-102.160Upgrade python-perfUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-livepatch-5.10.215-203.850Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.345-262.561Upgrade kernel-debuginfo | Dec 12, 2024 | May 1, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-livepatch-6.1.84-99.169Upgrade kernelUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfo | Feb 17, 2025 | May 1, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Jul 16, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 8, 2024 | May 1, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 17, 2024 | May 1, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 6, 2024 | May 1, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jun 6, 2024 | May 1, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rtUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modulesUpgrade kernel | Jun 17, 2024 | May 1, 2024 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-obs-buildUpgrade kernel-default-baseUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-azure-baseUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade dtb-amdUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-sprdUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade dtb-appleUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade dtb-qcomUpgrade kernel-default-manUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade dtb-xilinxUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade kernel-debug | Jun 24, 2024 | May 1, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1133-azureUpgrade linux-image-5.15.0-1060-intel-iotgUpgrade linux-image-azure-lts-20.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1006-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1064-gcpUpgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1058-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-116-generic-lpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-116-generic-64kUpgrade linux-image-intelUpgrade linux-image-6.8.0-1005-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-oem-osp1Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1127-oracleUpgrade linux-image-6.8.0-1006-oemUpgrade linux-image-6.8.0-1004-gkeUpgrade linux-image-generic-64kUpgrade linux-image-bluefieldUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-116-genericUpgrade linux-image-oem-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1068-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1065-awsUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-116-lowlatency-64kUpgrade linux-image-5.4.0-1047-xilinx-zynqmpUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1060-nvidia-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1040-iotUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1008-azureUpgrade linux-image-6.8.0-1009-awsUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-189-lowlatencyUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1048-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1068-azureUpgrade linux-image-5.4.0-1088-bluefieldUpgrade linux-image-5.15.0-1058-raspiUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1128-awsUpgrade linux-image-5.4.0-189-generic-lpaeUpgrade linux-image-5.4.0-1075-ibmUpgrade linux-image-6.8.0-35-generic-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1063-oracleUpgrade linux-image-5.15.0-116-lowlatencyUpgrade linux-image-6.8.0-1008-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1095-gkeopUpgrade linux-image-5.15.0-1062-kvmUpgrade linux-image-6.8.0-1006-oracle-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1062-gkeUpgrade linux-image-5.15.0-1065-gcpUpgrade linux-image-6.8.0-35-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1132-gcpUpgrade linux-image-5.4.0-1116-kvmUpgrade linux-image-5.4.0-1112-raspiUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1060-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-189-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-35-lowlatencyUpgrade linux-image-6.8.0-35-genericUpgrade linux-image-6.8.0-1006-ibm | Jul 1, 2024 | May 1, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 1, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub