In the Linux kernel, the following vulnerability has been resolved:
xfs: fix log recovery buffer allocation for the legacy h_size fixup
Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer.
Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-modulesUpgrade libperfUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade rvUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-headersUpgrade kernel-64kUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debugUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-rt-coreUpgrade kernel-rt-kvmUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade bpftoolUpgrade rtlaUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade python3-perfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-uki-virtUpgrade kernel-cross-headersUpgrade kernel-64k-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-kvmUpgrade perf | Aug 12, 2024 | Jul 5, 2024 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.165-110.161 | May 22, 2025 | Jul 5, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-modules-extraUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo | Jun 11, 2025 | Jul 5, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Jul 5, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Oct 9, 2024 | Jul 5, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Aug 16, 2024 | Jul 5, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 12, 2024 | Jul 5, 2024 |
| Rocky_linux | — | Upgrade kernel-zfcpdumpUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libsUpgrade perf-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade rvUpgrade python3-perf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-coreUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-extraUpgrade perfUpgrade libperfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-cross-headers | Aug 22, 2024 | Jul 5, 2024 |
| Suse | — | Upgrade dtb-broadcomUpgrade kernel-source-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-azureUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade gfs2-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-appleUpgrade dtb-amazonUpgrade dtb-caviumUpgrade kernel-debugUpgrade dtb-exynosUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade kernel-rt-extraUpgrade kernel-obs-qaUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade reiserfs-kmp-default | Aug 8, 2024 | Jul 5, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-genericUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-ibmUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-oem-22.04aUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04dUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-125-lowlatency | Nov 12, 2024 | Jul 5, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 9, 2025 | Jul 5, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub