In the Linux kernel, the following vulnerability has been resolved:
block: refine the EOF check in blkdev_iomap_begin
blkdev_iomap_begin rounds down the offset to the logical block size before stashing it in iomap->offset and checking that it still is inside the inode size.
Check the i_size check to the raw pos value so that we don't try a zero size write if iter->pos is unaligned.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Jun 19, 2024 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade dtb-socionextUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kernel-rt-develUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade dtb-renesasUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-64kb-devel | Aug 8, 2024 | Jun 19, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-azureUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1008-gke | Aug 9, 2024 | Jun 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub